From: Andreas Schneider Date: Wed, 31 Jul 2019 13:41:29 +0000 (+0200) Subject: s4:rpc_server: Use generate_secret_buffer() for backupkey wap_key X-Git-Tag: tdb-1.4.2~157 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=5a62056b4530e4c509444be9164a1fca1dce193f;p=thirdparty%2Fsamba.git s4:rpc_server: Use generate_secret_buffer() for backupkey wap_key Signed-off-by: Andreas Schneider Reviewed-by: Andrew Bartlett --- diff --git a/source4/rpc_server/backupkey/dcesrv_backupkey.c b/source4/rpc_server/backupkey/dcesrv_backupkey.c index a826ae083f4..d192858e468 100644 --- a/source4/rpc_server/backupkey/dcesrv_backupkey.c +++ b/source4/rpc_server/backupkey/dcesrv_backupkey.c @@ -1263,7 +1263,8 @@ static WERROR generate_bkrp_server_wrap_key(TALLOC_CTX *ctx, struct ldb_context char *secret_name; TALLOC_CTX *frame = talloc_stackframe(); - generate_random_buffer(wrap_key.key, sizeof(wrap_key.key)); + /* We need to use a CSPRNG which reseeds for generating session keys. */ + generate_secret_buffer(wrap_key.key, sizeof(wrap_key.key)); ndr_err = ndr_push_struct_blob(&blob_wrap_key, ctx, &wrap_key, (ndr_push_flags_fn_t)ndr_push_bkrp_dc_serverwrap_key); if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {