From: Joe Orton <jorton@apache.org>
Date: Tue, 10 Feb 2004 12:17:44 +0000 (+0000)
Subject: * modules/ssl/ssl_engine_pphrase.c: Note that the ERR_clear_error()
X-Git-Tag: pre_ajp_proxy~668
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=1609950077335df50222df2dd2259766548eb120;p=apache

* modules/ssl/ssl_engine_pphrase.c: Note that the ERR_clear_error()
call is not merely a cosmetic fix in light of PR 21160.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102628 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/modules/ssl/ssl_engine_pphrase.c b/modules/ssl/ssl_engine_pphrase.c
index 41ae57d66f..d38de7ea2d 100644
--- a/modules/ssl/ssl_engine_pphrase.c
+++ b/modules/ssl/ssl_engine_pphrase.c
@@ -340,8 +340,9 @@ void ssl_pphrase_Handle(server_rec *s, apr_pool_t *p)
                 cpPassPhraseCur = NULL;
                 ssl_pphrase_server_rec = s; /* to make up for sslc flaw */
 
-                /* Ensure that the error stack is empty; otherwise the
-                 * OpenSSL UI code may dump it to stderr. */
+                /* Ensure that the error stack is empty; some SSL
+                 * functions will fail spuriously if the error stack
+                 * is not empty. */
                 ERR_clear_error();
 
                 bReadable = ((pPrivateKey = SSL_read_PrivateKey(szPath, NULL,