Source: pound Version: 2.6-6.1 Severity: wishlist User: reproducible-bui...@lists.alioth.debian.org Usertags: randomness X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
Hi! While working on the "reproducible builds" effort [1], we have noticed that pound could not be built reproducibly. During build "openssl dhparam" is used to generate C header files containing DH parameters, which are not reproducible. Those are always randomly generated. Even when seeded with "-rand /filename", openssl reads from /dev/urandom to generate them. I'm not sure what the best solution would be to make it reproducible. Perhaps the header files can be pre-generated and included in the source package? Regards, Reiner [1]: https://wiki.debian.org/ReproducibleBuilds
