openssl: Don't use deprecated RAND_pseudo_bytes()

diff --git a/src/libstrongswan/plugins/openssl/openssl_rng.c b/src/libstrongswan/plugins/openssl/openssl_rng.c
index f8e98fc0f57ec2166bf1ad4d892c98a58658b94f..a25b6b4b665627d04f06fa486eed0746fd858e5b 100644 (file)
--- a/src/libstrongswan/plugins/openssl/openssl_rng.c
+++ b/src/libstrongswan/plugins/openssl/openssl_rng.c
@@ -49,13 +49,6 @@ struct private_openssl_rng_t {
 METHOD(rng_t, get_bytes, bool,
        private_openssl_rng_t *this, size_t bytes, uint8_t *buffer)
 {
-       if (this->quality == RNG_WEAK)
-       {
-               /* RAND_pseudo_bytes() returns 1 if returned bytes are strong,
-                * 0 if of not. Both is acceptable for RNG_WEAK. */
-               return RAND_pseudo_bytes((char*)buffer, bytes) != -1;
-       }
-       /* A 0 return value is a failure for RAND_bytes() */
        return RAND_bytes((char*)buffer, bytes) == 1;
 }