Re: more axeing at openssl

2014-04-22 Thread Theo de Raadt
> This replaces RAND_{,pseudo_}bytes() calls with equivelant arc4random_buf(3) > calls for apps/ and ssl/ (crypto/ still has a bunch). Actually last time this was discussed, the idea was to leave this as-is for now. Then we can decide if the "stronger of the two" should remain a seperate name. T

Re: more axeing at openssl

2014-04-21 Thread Bob Beck
I don't think we want to do this yet. RAND_bytes and RAND_pseudo_bytes will not be going away. On Mon, Apr 21, 2014 at 9:24 PM, Jean-Philippe Ouellet wrote: > Here's another pass. > > This replaces RAND_{,pseudo_}bytes() calls with equivelant arc4random_buf(3) > calls for apps/ and ssl/ (crypto/

Re: more axeing at openssl

2014-04-21 Thread Jean-Philippe Ouellet
Here's another pass. This replaces RAND_{,pseudo_}bytes() calls with equivelant arc4random_buf(3) calls for apps/ and ssl/ (crypto/ still has a bunch). There was one that was commented out (in ssl/s3_pkt.c) which I wasn't sure about, so I made the accoring transformation and left it commented out

Re: more axeing at openssl

2014-04-17 Thread Ted Unangst
On Thu, Apr 17, 2014 at 04:00, Jean-Philippe Ouellet wrote: > Hi, > > Here's more fuel for the OpenSSL fire. Mostly just axeing at ifdefs, > trying to err on the conservitive side. I deleted most (all?) of this yesterday. Your cvs mirrors are quite likely to lag behind development for a while.

more axeing at openssl

2014-04-17 Thread Jean-Philippe Ouellet
Hi, Here's more fuel for the OpenSSL fire. Mostly just axeing at ifdefs, trying to err on the conservitive side. There's obviously *TONS* more to clean up, but I only had so much time tonight. :) BTW, libssl and libcrypto don't currently build because their Makefiles still include some recently