]> code.ossystems Code Review - openembedded-core.git/commit
openssl: Enable os option for with-rand-seed as well
authorKhem Raj <raj.khem@gmail.com>
Tue, 17 Sep 2019 18:49:47 +0000 (11:49 -0700)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 18 Sep 2019 11:08:56 +0000 (12:08 +0100)
commit8b4edb8552b238680d8dcef565e830a8e28a223c
tree6789cd917e9fe46b451f0712b7252d08ddc12998
parent8c39aa80e3624a225abfa76d459b6ce4da259b64
openssl: Enable os option for with-rand-seed as well

with openSSL 1.1.1d we start seeing errors like

Error Generating Key
139979727451584:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:

when using openssl from openssl-native on build hosts, this is due to
limiting the random seed to devrandom, to support older hosts, since the
option allows to have a comma separated list of methods to try, we can
try the default first and if that fails then fallback to devrandom, this
will ensure that it keeps working with build systems which dont support
getrandom()

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Adrian Bunk <bunk@stusta.de>
Cc: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-connectivity/openssl/openssl_1.1.1d.bb