Re: Doubt about OpenSSL library initialization in an HTTP client application

[silvioprog <silvioprog@xxxxxxxxx>]

On Mon, Dec 12, 2016 at 3:04 PM, Salz, Rich <rsalz@xxxxxxxxxx> wrote:

> "In short, I just replaced the RAND_screen() call to the RAND_poll(), generated a random buffer using RAND_bytes() (based on https://wiki.openssl.org/index.php/Random_Numbers#Software) seeding it via RAND_add()"

You fed RAND_bytes output back into RAND_add?  That's silly.

Yes. Is it unnecessary? My steps are:

...

- RAND_scree()

+ RAND_poll()

+ RAND_bytes(buf, 128);

+ RAND_add(buf, length(buf), length(buf));

...

(I noticed I sent wrong patch, the correct one declare the RAND_bytes func ^^' )

--

Silvio Clécio

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users