1 files changed, 20 insertions, 12 deletions

diff --git a/src/lib/libtls/tls.c b/src/lib/libtls/tls.c
index 8f2c7dde05..4a9db289bd 100644
--- a/src/lib/libtls/tls.c
+++ b/src/lib/libtls/tls.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: tls.c,v 1.75 2018/02/10 04:57:35 jsing Exp $ */
+/* $OpenBSD: tls.c,v 1.76 2018/03/07 17:17:47 beck Exp $ */
 /*
  * Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
  *
@@ -19,6 +19,7 @@
 
 #include <errno.h>
 #include <limits.h>
+#include <pthread.h>
 #include <stdlib.h>
 #include <unistd.h>
 
@@ -35,28 +36,35 @@
 
 static struct tls_config *tls_config_default;
 
-int
-tls_init(void)
-{
-        static int tls_initialised = 0;
-
-        if (tls_initialised)
-                return (0);
+static int tls_init_rv = -1;
 
+static void
+tls_do_init(void)
+{
         SSL_load_error_strings();
         SSL_library_init();
 
         if (BIO_sock_init() != 1)
-                return (-1);
+                return;
 
         if ((tls_config_default = tls_config_new()) == NULL)
-                return (-1);
+                return;
 
         tls_config_default->refcount++;
 
-        tls_initialised = 1;
+        tls_init_rv = 0;
+        return;
+}
 
-        return (0);
+int
+tls_init(void)
+{
+        static pthread_once_t once = PTHREAD_ONCE_INIT;
+
+        if (pthread_once(&once, tls_do_init) != 0)
+                return -1;
+
+        return tls_init_rv;
 }
 
 const char *