Samuel Williams <[email protected]> wrote: Shouldn't it just raise an error with a backtrace? OpenSSL has a stack of errors which can be formatted as text. a) this needs to be intelligently returned to the user, not just fprintf(stderr,)'ed, so that errors can be intelligently displayed. For instance, it's the only way to find out why a certificate with an obsolete algorithm won't load. (i.e. SHA1 inside RSA signature) b) users should ideally rescue on some aspects of the backtrace, but each layer of the openssl system can return an error.