thread safety in gnutls [was: Re: Handshake and verification]

[lfinsto at gwdg.de]

On Wed, December 9, 2009 5:07 pm, Daniel Kahn Gillmor wrote:
> On 12/09/2009 10:58 AM, lfinsto at gwdg.de wrote:
>> On Wed, December 9, 2009 4:45 pm, Daniel Kahn Gillmor wrote:
>>>   gcry_control (GCRYCTL_SUSPEND_SECMEM_WARN);
>>>   gcry_control (GCRYCTL_INIT_SECMEM, 32768, 0);
>>>   gcry_control (GCRYCTL_RESUME_SECMEM_WARN);
>>
>> It worked!  Thank you, and for the references.
>
> great!  just to be clear: you were able to remove the mutex and the
> locking that you had needed earlier, and the program now runs fine?

Yes, it now works without locking the mutex (which I've removed entirely).

I'll try installing the newest version of the gcrypt library and removing
the code for explicitly initializing the secure memory, but I won't be
able to work on that today.


Laurence