From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 30 Jan 2024 17:45:42 +0000 (+0000)
Subject: vpnmain.cgi: Do not use a bad source for randomness
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=182743310ce47d9a78d5fd6d32c510bcbb163762;p=people%2Fms%2Fipfire-2.x.git

vpnmain.cgi: Do not use a bad source for randomness

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi
index 53507305f..8b05a0de7 100644
--- a/html/cgi-bin/vpnmain.cgi
+++ b/html/cgi-bin/vpnmain.cgi
@@ -2141,7 +2141,7 @@ END
 		&General::log("ipsec", "Creating a cert...");
 
 		if (open(STDIN, "-|")) {
-			my $opt = " req -nodes -rand /proc/interrupts:/proc/net/rt_cache";
+			my $opt = " req -nodes";
 			$opt .= " -newkey rsa:4096";
 			$opt .= " -keyout ${General::swroot}/certs/$cgiparams{'NAME'}key.pem";
 			$opt .= " -out ${General::swroot}/certs/$cgiparams{'NAME'}req.pem";