Horton

Re: OpenSSL randomness seeding

Michael Paquier <michael@paquier.xyz>

View thread View on postgr.es
From: Michael Paquier <michael@paquier.xyz>
To: Noah Misch <noah@leadboat.com>
Cc: Daniel Gustafsson <daniel@yesql.se>, Postgres hackers <pgsql-hackers@lists.postgresql.org>
Date: 2020-07-22T05:35:10Z
Lists: pgsql-hackers 
On Tue, Jul 21, 2020 at 10:00:20PM -0700, Noah Misch wrote:
> These look good.  I'll push them on Saturday or later.  I wondered whether to
> do both RAND_cleanup() and RAND_poll(), to purge all traces of the old seed on
> versions supporting both.  Since that would strictly (albeit negligibly)
> increase seed predictability, I like your decision here.

Thanks Noah for taking care of it.  No plans for a backpatch, right?
--
Michael

Commits

  1. Remove optimization for RAND_poll() failing.

  2. Use RAND_poll() for seeding randomness after fork().