Completely remove RAND_egd support
The EGD daemon is completely unmaintained and has not seen a release since 13 years which is not an acceptable timeframe for cryptographic software. It is not packaged in any linux distribution I know of and definitely not in *BSD. LibreSSL has already dropped support for RAND_egd.
This commit is contained in:
@@ -67,22 +67,8 @@ seed_something(void)
|
||||
/* Calling RAND_status() will try to use /dev/urandom if it exists so
|
||||
we do not have to deal with it. */
|
||||
if (RAND_status() != 1) {
|
||||
#if defined(HAVE_RAND_EGD)
|
||||
krb5_context context;
|
||||
const char *p;
|
||||
|
||||
/* Try using egd */
|
||||
if (!krb5_init_context(&context)) {
|
||||
p = krb5_config_get_string(context, NULL, "libdefaults",
|
||||
"egd_socket", NULL);
|
||||
if (p != NULL)
|
||||
RAND_egd_bytes(p, ENTROPY_NEEDED);
|
||||
krb5_free_context(context);
|
||||
}
|
||||
#else
|
||||
/* TODO: Once a Windows CryptoAPI RAND method is defined, we
|
||||
can use that and failover to another method. */
|
||||
#endif
|
||||
}
|
||||
|
||||
if (RAND_status() == 1) {
|
||||
|
Reference in New Issue
Block a user