Switch to OPENSSL_init_ssl() and prevent an openssl configuration file from

being loaded behind our back, at a later point.

ok beck@

1 files changed, 2 insertions, 3 deletions

diff --git a/src/lib/libtls/tls.c b/src/lib/libtls/tls.c
index 467db164d5..6033e846ba 100644
--- a/src/lib/libtls/tls.c
+++ b/src/lib/libtls/tls.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: tls.c,v 1.79 2018/03/19 16:34:47 jsing Exp $ */
+/* $OpenBSD: tls.c,v 1.80 2018/04/07 16:30:59 jsing Exp $ */
 /*
  * Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
  *
@@ -41,8 +41,7 @@ static int tls_init_rv = -1;
 static void
 tls_do_init(void)
 {
-        SSL_load_error_strings();
-        SSL_library_init();
+        OPENSSL_init_ssl(OPENSSL_INIT_NO_LOAD_CONFIG, NULL);
 
         if (BIO_sock_init() != 1)
                 return;