[GitHub] [httpd] notroj commented on pull request #123: Drop SSLRandomSeed & PRNG seeding with OpenSSL 1.1.1 and later.

[GitBox <gi...@apache.org>]

notroj commented on pull request #123:
URL: https://github.com/apache/httpd/pull/123#issuecomment-625079246


   I would be fine with blocking as well, but it does not look correct to me that RAND_status() can block with the default ENGINE in OpenSSL 1.1.1. I can't see mention of the OpenSSL version in the linked report.  This is what the default RAND_status() does:
   
   https://github.com/openssl/openssl/blob/master/crypto/rand/drbg_lib.c#L1349
   
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@httpd.apache.org
For additional commands, e-mail: notifications-help@httpd.apache.org