DescriptionFix error-handling for non-SSL_get_error functions.
Some functions (the ones that do I/O) use this crazy three-level error
system (rv, SSL_get_error, and the error queue). Others are more
straightforward and simply use the error queue.
Using SSL_get_error here could result in state from other operations
getting in the way of things.
Since these don't actually do I/O and really can only fail on internal
error, just map to ERR_FAILED rather than try to have so many
MapOpenSSLError variants.
Also treat SSL_export_key_material's return value as a boolean. In
BoringSSL, the calling convention is simpler and documented as such.
BUG=none
Committed: https://crrev.com/f225b26378120e2c3dfd28f3e451ffb2d4e8c819
Cr-Commit-Position: refs/heads/master@{#419006}
Patch Set 1 #
Messages
Total messages: 13 (8 generated)
|