The pandemic of incomplete OpenSSL error handling

· Julian Andres Klode · July 3, 2026, 4:36 p.m.
error handling TLS OpenSSL software development
Summary
The blog post discusses a reported bug in APT related to TLS failing on FIPS systems due to MD5 errors. The author argues against the suggested solution of using ERR_clear_error() to handle errors, emphasizing that not all errors should be discarded and that programs should fail correctly to highlight critical issues.
Read full post on blog.jak-linux.org →
AUTHOR
Advertise
Sponsor diff.blog
Put your product in front of developers who read and write about their craft. One exclusive sponsor at a time.
Become a sponsor →
BLOG POST FEATURED ON

Placeholder image
Hacker News

7 points

Add this plugin to your blog