Hallo,

I noticed that nss was not using the urandom device on linux to gather
entropy for the key generation. This patch fixes it.

-Andi



--- security/nss/lib/util/unix_rand.c-o Tue Jan 30 02:52:47 2001
+++ security/nss/lib/util/unix_rand.c   Wed Aug 22 06:48:57 2001
@@ -730,6 +730,7 @@
     char **cp;
     char *randfile;
     char *files[] = {
+       "/dev/urandom",
        "/etc/passwd",
        "/etc/utmp",
        "/tmp",
@@ -878,7 +879,7 @@
            if (bytes == 0) break;
            RNG_RandomUpdate(buffer, bytes);
            totalFileBytes += bytes;
-           if (totalFileBytes > 1024*1024) break;
+           if (totalFileBytes > 32*1024) break;
        }
        fclose(file);
     }

Reply via email to