Re: Move OpenSSL random under USE_OPENSSL_RANDOM
| От | Tom Lane |
|---|---|
| Тема | Re: Move OpenSSL random under USE_OPENSSL_RANDOM |
| Дата | |
| Msg-id | 757056.1605539160@sss.pgh.pa.us обсуждение исходный текст |
| Ответ на | Re: Move OpenSSL random under USE_OPENSSL_RANDOM (Magnus Hagander <magnus@hagander.net>) |
| Ответы |
Re: Move OpenSSL random under USE_OPENSSL_RANDOM
|
| Список | pgsql-hackers |
Magnus Hagander <magnus@hagander.net> writes:
> I agree with those -- either we remove the ability to choose random source
> independently of the SSL library (and then only use the windows crypto
> provider or /dev/urandom as platform-specific choices when *no* SSL library
> is used), and in that case we should not have separate #ifdef's for them.
> Or we fix the includes. Which is obviously easier, but we should take the
> time to do what we think is right long-term of course.
FWIW, I'd vote for the former. I think the presumption that OpenSSL's
random-number machinery can be used without any other initialization is
shaky as heck.
regards, tom lane
В списке pgsql-hackers по дате отправления: