Hi,

> It does not look like 1.0.1f changed the default behavior of
> ENGINE_rdrand (coderman's been following it).

Yes it did, rdrand is no longer enabled by default. Here [1] is
the backport in the OpenSSL_1_0_1-stable head [2].

At least Debian [3] and Ubuntu backported this as well.



Regards,

Lukas

[1] 
http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=1c2c5e402a757a63d690bd2390bd6b8b491ef184
[2] 
http://git.openssl.org/gitweb/?p=openssl.git;a=shortlog;h=refs/heads/OpenSSL_1_0_1-stable
[3] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732710                     
                  
_______________________________________________
nginx mailing list
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx

Reply via email to