]> git.ipfire.org Git - thirdparty/strongswan.git/commit
openssl: Don't manually seed DRBG with OpenSSL 1.1.1
authorTobias Brunner <tobias@strongswan.org>
Thu, 12 Sep 2019 14:15:46 +0000 (16:15 +0200)
committerTobias Brunner <tobias@strongswan.org>
Tue, 24 Sep 2019 14:42:46 +0000 (16:42 +0200)
commit095a2c2eac4b5e9dbd9034afa6e86f3a0fee1036
treea9d84ffc4b45bf84cdf8451b5d9f0867954edae6
parent55879d32003434b5a2782025bc9aa7994dbe345d
openssl: Don't manually seed DRBG with OpenSSL 1.1.1

According to the documentation, it's generally not necessary to manually
seed OpenSSL's DRBG (and it actually can cause the daemon to lock up
during start up on systems with low entropy if OpenSSL is already trying
to seed it itself and holds the lock).  While that might already have been
the case with earlier versions, it's not explicitly stated in their
documentation.  So we keep the code for these versions.
src/libstrongswan/plugins/openssl/openssl_plugin.c