{"action":"created","issue":{"url":"https://api.github.com/repos/openssl/openssl/issues/4848","repository_url":"https://api.github.com/repos/openssl/openssl","labels_url":"https://api.github.com/repos/openssl/openssl/issues/4848/labels{/name}","comments_url":"https://api.github.com/repos/openssl/openssl/issues/4848/comments","events_url":"https://api.github.com/repos/openssl/openssl/issues/4848/events","html_url":"https://github.com/openssl/openssl/pull/4848","id":279417988,"number":4848,"title":"Apply system_default configuration on SSL_CTX_new()","user":{"login":"t8m","id":7125407,"avatar_url":"https://avatars3.githubusercontent.com/u/7125407?v=4","gravatar_id":"","url":"https://api.github.com/users/t8m","html_url":"https://github.com/t8m","followers_url":"https://api.github.com/users/t8m/followers","following_url":"https://api.github.com/users/t8m/following{/other_user}","gists_url":"https://api.github.com/users/t8m/gists{/gist_id}","starred_url":"https://api.github.com/users/t8m/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/t8m/subscriptions","organizations_url":"https://api.github.com/users/t8m/orgs","repos_url":"https://api.github.com/users/t8m/repos","events_url":"https://api.github.com/users/t8m/events{/privacy}","received_events_url":"https://api.github.com/users/t8m/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/openssl/openssl/milestones/11","html_url":"https://github.com/openssl/openssl/milestone/11","labels_url":"https://api.github.com/repos/openssl/openssl/milestones/11/labels","id":3024154,"number":11,"title":"Post 1.1.1","description":"","creator":{"login":"kaduk","id":1894506,"avatar_url":"https://avatars1.githubusercontent.com/u/1894506?v=4","gravatar_id":"","url":"https://api.github.com/users/kaduk","html_url":"https://github.com/kaduk","followers_url":"https://api.github.com/users/kaduk/followers","following_url":"https://api.github.com/users/kaduk/following{/other_user}","gists_url":"https://api.github.com/users/kaduk/gists{/gist_id}","starred_url":"https://api.github.com/users/kaduk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kaduk/subscriptions","organizations_url":"https://api.github.com/users/kaduk/orgs","repos_url":"https://api.github.com/users/kaduk/repos","events_url":"https://api.github.com/users/kaduk/events{/privacy}","received_events_url":"https://api.github.com/users/kaduk/received_events","type":"User","site_admin":false},"open_issues":120,"closed_issues":9,"state":"open","created_at":"2018-01-09T21:08:23Z","updated_at":"2018-02-04T10:32:54Z","due_on":null,"closed_at":null},"comments":10,"created_at":"2017-12-05T15:31:26Z","updated_at":"2018-02-06T16:20:19Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/openssl/openssl/pulls/4848","html_url":"https://github.com/openssl/openssl/pull/4848","diff_url":"https://github.com/openssl/openssl/pull/4848.diff","patch_url":"https://github.com/openssl/openssl/pull/4848.patch"},"body":"When SSL_CTX is created preinitialize it with system default\r\nconfiguration from system_default section.\r\n\r\n<!--\r\nThank you for your pull request. Please review these requirements:\r\n\r\nContributors guide: https://github.com/openssl/openssl/blob/master/CONTRIBUTING\r\n\r\nOther than that, provide a description above this comment if there isn't one already\r\n\r\nIf this fixes a github issue, make sure to have a line saying 'Fixes #XXXX' (without quotes) in the commit message.\r\n-->\r\n\r\n##### Checklist\r\n<!-- Remove items that do not apply. For completed items, change [ ] to [x]. -->\r\n- [x] documentation is added or updated\r\n- [x] tests are added or updated\r\n"},"comment":{"url":"https://api.github.com/repos/openssl/openssl/issues/comments/363476530","html_url":"https://github.com/openssl/openssl/pull/4848#issuecomment-363476530","issue_url":"https://api.github.com/repos/openssl/openssl/issues/4848","id":363476530,"user":{"login":"vdukhovni","id":1107986,"avatar_url":"https://avatars2.githubusercontent.com/u/1107986?v=4","gravatar_id":"","url":"https://api.github.com/users/vdukhovni","html_url":"https://github.com/vdukhovni","followers_url":"https://api.github.com/users/vdukhovni/followers","following_url":"https://api.github.com/users/vdukhovni/following{/other_user}","gists_url":"https://api.github.com/users/vdukhovni/gists{/gist_id}","starred_url":"https://api.github.com/users/vdukhovni/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vdukhovni/subscriptions","organizations_url":"https://api.github.com/users/vdukhovni/orgs","repos_url":"https://api.github.com/users/vdukhovni/repos","events_url":"https://api.github.com/users/vdukhovni/events{/privacy}","received_events_url":"https://api.github.com/users/vdukhovni/received_events","type":"User","site_admin":false},"created_at":"2018-02-06T16:20:19Z","updated_at":"2018-02-06T16:20:19Z","author_association":"NONE","body":"Either opt-out or a new API entry point (opt-in) is I think required.  I'm also concerned about the performance impact of whatever processing this might imply.  SSL_CTX_new() is called not only when the application first initializes, but IIRC also when creating contexts for SNI, and this should involve excessive processing that can be avoided, or unwanted processing that might bring in unexpected settings.\r\n\r\nMy general view is that OpenSSL provides low-level primitives that can be composed to yield higher-level user-friendly functions.  This makes it possible to make various choices, without being forced into a one-size fits all model.  The downside is that we've not always (or often not) provided the higher-level user-friendly interfaces.  So we should do more of that, but not necessarily by converting the low-level functions to one-size fits all common-case interfaces.\r\n\r\nThoughts?"}}
{"actor":{"display_login":"vdukhovni"}}