|
@@ -19,6 +19,56 @@
|
|
|
#include "crypto/rand.h"
|
|
|
#include <stdio.h>
|
|
|
#include "internal/dso.h"
|
|
|
+
|
|
|
+/*
|
|
|
+ * Defines related to seed sources
|
|
|
+ */
|
|
|
+#ifndef DEVRANDOM
|
|
|
+/*
|
|
|
+ * set this to a comma-separated list of 'random' device files to try out. By
|
|
|
+ * default, we will try to read at least one of these files
|
|
|
+ */
|
|
|
+# define DEVRANDOM "/dev/urandom", "/dev/random", "/dev/hwrng", "/dev/srandom"
|
|
|
+# if defined(__linux) && !defined(__ANDROID__)
|
|
|
+# ifndef DEVRANDOM_WAIT
|
|
|
+# define DEVRANDOM_WAIT "/dev/random"
|
|
|
+# endif
|
|
|
+/*
|
|
|
+ * Linux kernels 4.8 and later changes how their random device works and there
|
|
|
+ * is no reliable way to tell that /dev/urandom has been seeded -- getentropy(2)
|
|
|
+ * should be used instead.
|
|
|
+ */
|
|
|
+# ifndef DEVRANDOM_SAFE_KERNEL
|
|
|
+# define DEVRANDOM_SAFE_KERNEL 4, 8
|
|
|
+# endif
|
|
|
+/*
|
|
|
+ * Some operating systems do not permit select(2) on their random devices,
|
|
|
+ * defining this to zero will force the use of read(2) to extract one byte
|
|
|
+ * from /dev/random.
|
|
|
+ */
|
|
|
+# ifndef DEVRANDM_WAIT_USE_SELECT
|
|
|
+# define DEVRANDM_WAIT_USE_SELECT 1
|
|
|
+# endif
|
|
|
+/*
|
|
|
+ * Define the shared memory identifier used to indicate if the operating
|
|
|
+ * system has properly seeded the DEVRANDOM source.
|
|
|
+ */
|
|
|
+# ifndef OPENSSL_RAND_SEED_DEVRANDOM_SHM_ID
|
|
|
+# define OPENSSL_RAND_SEED_DEVRANDOM_SHM_ID 114
|
|
|
+# endif
|
|
|
+
|
|
|
+# endif
|
|
|
+#endif
|
|
|
+
|
|
|
+#if !defined(OPENSSL_NO_EGD) && !defined(DEVRANDOM_EGD)
|
|
|
+/*
|
|
|
+ * set this to a comma-separated list of 'egd' sockets to try out. These
|
|
|
+ * sockets will be tried in the order listed in case accessing the device
|
|
|
+ * files listed in DEVRANDOM did not return enough randomness.
|
|
|
+ */
|
|
|
+# define DEVRANDOM_EGD "/var/run/egd-pool", "/dev/egd-pool", "/etc/egd-pool", "/etc/entropy"
|
|
|
+#endif
|
|
|
+
|
|
|
#ifdef __linux
|
|
|
# include <sys/syscall.h>
|
|
|
# ifdef DEVRANDOM_WAIT
|