I cant imagine that it does modify it. The docs for SSL_CTX_set_default_passwd_cb_userdata dont give any hints.  If we are concerned I can put it back the way it was (strcpy) and make it safer using a StringBuffer instead of a char array