* modules/ssl/ssl_engine_pphrase.c: Note that the ERR_clear_error()

call is not merely a cosmetic fix in light of PR 21160.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102628 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/modules/ssl/ssl_engine_pphrase.c b/modules/ssl/ssl_engine_pphrase.c
index 41ae57d66fe2ec02cbf4d36348b9bec0b3d31728..d38de7ea2dceaeaffb7e442ac13008b2a8088692 100644 (file)
--- a/modules/ssl/ssl_engine_pphrase.c
+++ b/modules/ssl/ssl_engine_pphrase.c
@@ -340,8 +340,9 @@ void ssl_pphrase_Handle(server_rec *s, apr_pool_t *p)
                 cpPassPhraseCur = NULL;
                 ssl_pphrase_server_rec = s; /* to make up for sslc flaw */
 
-                /* Ensure that the error stack is empty; otherwise the
-                 * OpenSSL UI code may dump it to stderr. */
+                /* Ensure that the error stack is empty; some SSL
+                 * functions will fail spuriously if the error stack
+                 * is not empty. */
                 ERR_clear_error();
 
                 bReadable = ((pPrivateKey = SSL_read_PrivateKey(szPath, NULL,