denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

openssl: Don't use deprecated RAND_pseudo_bytes()

Browse Source
This commit is contained in:
Tobias Brunner
2016-06-29 11:09:38 +02:00
parent 985d7b1c67
commit cd08eb84cb
1 changed files with 0 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/openssl/openssl_rng.c
-7
View File
@@ -49,13 +49,6 @@ struct private_openssl_rng_t {
METHOD(rng_t, get_bytes, bool, METHOD(rng_t, get_bytes, bool,
private_openssl_rng_t *this, size_t bytes, uint8_t *buffer) private_openssl_rng_t *this, size_t bytes, uint8_t *buffer)
{ {
if (this->quality == RNG_WEAK)
{
/* RAND_pseudo_bytes() returns 1 if returned bytes are strong,
* 0 if of not. Both is acceptable for RNG_WEAK. */
return RAND_pseudo_bytes((char*)buffer, bytes) != -1;
}
/* A 0 return value is a failure for RAND_bytes() */
return RAND_bytes((char*)buffer, bytes) == 1; return RAND_bytes((char*)buffer, bytes) == 1;
} }