gcry_control (GCRYCTL_ENABLE_QUICK_RANDOM, 0) is being called after

libgcrypt initialization (gnutls_global_init).

diff --git a/src/certtool.c b/src/certtool.c
index 0388b2bbd6dadefe0e641fc828c63940ccdc4f3e..65f244ec350b7f6a1daf8b4719062d99eb84891d 100644 (file)
--- a/src/certtool.c
+++ b/src/certtool.c
@@ -915,9 +915,6 @@ gaa_parser (int argc, char **argv)
       template_parse (info.template);
     }
 
-  if (info.quick_random != 0)
-    gcry_control (GCRYCTL_ENABLE_QUICK_RANDOM, 0);
-
 #ifdef gcry_fips_mode_active
   if (gcry_fips_mode_active ())
     {
@@ -938,6 +935,9 @@ gaa_parser (int argc, char **argv)
   if ((ret = gnutls_global_init_extra ()) < 0)
     error (EXIT_FAILURE, 0, "global_init_extra: %s", gnutls_strerror (ret));
 
+  if (info.quick_random != 0)
+    gcry_control (GCRYCTL_ENABLE_QUICK_RANDOM, 0);
+
   switch (info.action)
     {
     case ACTION_SELF_SIGNED: