On Tue, 2006-04-18 at 09:43 +0100, Joe Orton wrote: > That code is only a fallback for when no external/OS-provided UUID > generation is used, and apr_generate_random_bytes() is not available or > fails. Any modern Linux/BSD platform will satisfy the first constraint > (with APR 1.0.3 and later), and the latter covers most of the rest.
Ahh, thanks for clarifying. That also explains why I had memories of /dev/random exhaustion issues resulting from generating lots of UUIDs. So in theory, the code should probably be changed to use an APR-internal PRNG and not stomp on global state, but it's a low-priority issue.
