In another question about how to use OpenSSL programmatically a community member was writing, one suggestion was to use the
system() command whereas another was to include the C headers and work with the library using functions directly. Also, if using
system() is there a security benefit to using
popen() or another function instead?
What would be the security implications of running OpenSSL as a library versus calling a compiled executable from the system? I imagine there might be issues about integrity and authenticity relying upon openssl installed on a system in some cases, but its also possible an application might use an outdated library. Are there certain considerations for this scenario, or can this be answered more generally (If so, please feel free to edit the question).