Re: securerandom.source value change in Java 8 vs Java 7

2017-01-24 Thread Philippe Mouawad
Hello , Applied in commit r1780108. Regards On Thu, Jan 19, 2017 at 5:58 PM, Rainer Jung wrote: > Am 18.01.2017 um 22:56 schrieb Philippe Mouawad: > >> Hi Rainer, >> Thanks a lot for your answer. >> >> For reference the bug you mention is mentioned here: >> http://security.stackexchange.com/ques

Re: securerandom.source value change in Java 8 vs Java 7

2017-01-19 Thread Rainer Jung
Am 18.01.2017 um 22:56 schrieb Philippe Mouawad: Hi Rainer, Thanks a lot for your answer. For reference the bug you mention is mentioned here: http://security.stackexchange.com/questions/40633/java- securerandom-doesnt-block-how So if I understand you correctly, don't you think we should advise

Re: securerandom.source value change in Java 8 vs Java 7

2017-01-18 Thread Philippe Mouawad
Hi Rainer, Thanks a lot for your answer. For reference the bug you mention is mentioned here: http://security.stackexchange.com/questions/40633/java- securerandom-doesnt-block-how So if I understand you correctly, don't you think we should advise users of JMeter to use /dev/urandom as we're switc

Re: securerandom.source value change in Java 8 vs Java 7

2017-01-18 Thread Rainer Jung
Am 18.01.2017 um 17:54 schrieb Philippe Mouawad: Hello, Anybody knows why in Java 8 on Mac OSX / Linux / Windows (but is it ) (at least in last update but maybe in others) version: - securerandom.source=file:/dev/random While in last Java 7 version: - securerandom.source=file:/dev/uran

securerandom.source value change in Java 8 vs Java 7

2017-01-18 Thread Philippe Mouawad
Hello, Anybody knows why in Java 8 on Mac OSX / Linux / Windows (but is it ) (at least in last update but maybe in others) version: - securerandom.source=file:/dev/random While in last Java 7 version: - securerandom.source=file:/dev/urandom >From my experience this could have very bad p