thread safety in gnutls [was: Re: Handshake and verification]

[lfinsto at gwdg.de]

On Wed, December 9, 2009 4:45 pm, Daniel Kahn Gillmor wrote:
> On 12/09/2009 10:29 AM, lfinsto at gwdg.de wrote:
>> No, I had actually read this, but forgotten about it.  However, when I
>> tried it, i.e.,
>
>  [...]
>
> You're probably using a gcrypt version earlier than 1.4.3, when they
> added a default initialization of secure memory.  Try adding the
> following after the THREAD_CBS, but before the global_init to initialize
> gcrypt's secure memory explicitly:
>
>   gcry_control (GCRYCTL_SUSPEND_SECMEM_WARN);
>   gcry_control (GCRYCTL_INIT_SECMEM, 32768, 0);
>   gcry_control (GCRYCTL_RESUME_SECMEM_WARN);
>

It worked!  Thank you, and for the references.

Laurence