From 7bfd81d78ae41a8e036c930c42b722d9c43e7e37 Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Tue, 26 Nov 2024 10:19:33 +0100
Subject: [PATCH] wolfssl: Call wc_SetSeed_Cb() as required for FIPS-mode

---
 src/libstrongswan/plugins/wolfssl/wolfssl_plugin.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/libstrongswan/plugins/wolfssl/wolfssl_plugin.c b/src/libstrongswan/plugins/wolfssl/wolfssl_plugin.c
index 49f172aa4..2c30ba92e 100644
--- a/src/libstrongswan/plugins/wolfssl/wolfssl_plugin.c
+++ b/src/libstrongswan/plugins/wolfssl/wolfssl_plugin.c
@@ -547,6 +547,11 @@ plugin_t *wolfssl_plugin_create()
 
 	fips_mode = lib->settings->get_bool(lib->settings,
 								"%s.plugins.wolfssl.fips_mode", FALSE, lib->ns);
+
+#ifdef WC_RNG_SEED_CB
+	wc_SetSeed_Cb(wc_GenerateSeed);
+#endif
+
 #ifdef HAVE_FIPS
 	if (fips_mode)
 	{