From: Francis Dupont <fdupont@isc.org>
Date: Sun, 17 Sep 2017 10:02:09 +0000 (+0200)
Subject: Made RAND_status check optional (broke --disable-crypto-rand)
X-Git-Tag: v9.12.0b1~180
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=8a98277811ea50035ff37b744fa3dc5b75bee099;p=thirdparty%2Fbind9.git

Made RAND_status check optional (broke --disable-crypto-rand)
---

diff --git a/lib/dns/openssl_link.c b/lib/dns/openssl_link.c
index 0e5a9baf9cd..9f44f25c3dc 100644
--- a/lib/dns/openssl_link.c
+++ b/lib/dns/openssl_link.c
@@ -290,6 +290,7 @@ dst__openssl_init(const char *engine) {
 #endif
 #endif /* USE_ENGINE */
 
+#ifdef ISC_PLATFORM_CRYPTORANDOM
 	/* Protect ourselves against unseeded PRNG */
 	if (RAND_status() != 1) {
 		FATAL_ERROR(__FILE__, __LINE__,
@@ -297,6 +298,7 @@ dst__openssl_init(const char *engine) {
 			    "cannot be initialized (see the `PRNG not "
 			    "seeded' message in the OpenSSL FAQ)");
 	}
+#endif
 
 	return (ISC_R_SUCCESS);