NotificationsYou must be signed in to change notification settings
Fork6
Star31

Commitce4939f

committed

Use RAND_poll() for seeding randomness after fork().

OpenSSL deprecated RAND_cleanup(), and OpenSSL 1.1.0 made it into ano-op. Replace it with RAND_poll(), per an OpenSSL communityrecommendation. While this has no user-visible consequences underOpenSSL defaults, it might help under non-default settings.Daniel Gustafsson, reviewed by David Steele and Michael Paquier.Discussion:https://postgr.es/m/9B038FA5-23E8-40D0-B932-D515E1D8F66A@yesql.se

1 parent0a0727c commitce4939fCopy full SHA for ce4939f

File tree

1 file changed

-2

lines changed

src/backend/postmaster
- fork_process.c

1 file changed

-2

lines changed

`‎src/backend/postmaster/fork_process.c`

Lines changed: 4 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -109,10 +109,12 @@ fork_process(void)`
`109`	`109`	`}`
`110`	`110`
`111`	`111`	`/*`
`112`		`- * Make sure processes do not share OpenSSL randomness state.`
	`112`	`+ * Make sure processes do not share OpenSSL randomness state. This is`
	`113`	`+ * no longer required in OpenSSL 1.1.1 and later versions, but until`
	`114`	`+ * we drop support for version < 1.1.1 we need to do this.`
`113`	`115`	`*/`
`114`	`116`	`#ifdefUSE_OPENSSL`
`115`		`-RAND_cleanup();`
	`117`	`+RAND_poll();`
`116`	`118`	`#endif`
`117`	`119`	`}`
`118`	`120`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commitce4939f

File tree

1 file changed

1 file changed

`‎src/backend/postmaster/fork_process.c`

0 commit comments