On Wed, Mar 12, 2008 at 09:04:54PM +0000, Jason Cormie wrote:
> Package: openssl
> Followup-For: Bug #88728
> 
> 
> in the openssl changelog it says that 0.9.7 had the ability to try
> /dev/random if it didnt find /dev/urandom
> 
> http://www.openssl.org/news/changelog.html
> 
>  *) Change the Unix RAND_poll() variant to be able to poll several
>     random devices, as specified by DEVRANDOM, until a sufficient
>     amount of data has been collected.   We spend at most 10 ms on each
>     file (select timeout) and read in non-blocking mode.
>     DEVRANDOM now defaults to the list "/dev/urandom", "/dev/random",
>     "/dev/srandom" (previously it was just the string "/dev/urandom"), so on 
> typical
>     platforms the 10 ms delay will never occur.
> 
> I assume this means the bug can be closed

I don't agree.  DEVRANDOM is a compile time option.  This is something
you'd want to override in the application or maybe some environment
variable.


Kurt




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to