0
0
mirror of https://github.com/OpenVPN/openvpn3.git synced 2024-09-20 04:02:15 +02:00
openvpn3/openvpn/openssl
Heiko Hund 47795ea2d5 remove 'prng' argument from SSLLib::RandomAPI ctor
It was only supported by mbedTLS and is very easily used wrong since it
is just a boolean value. Other TLS stacks were using the regular strength
PRNG no matter what. Also we should not weaken a crypto strength PRNG,
now that we have the StrongRandomAPI type in place. It might give the
wrong sense of strength, when in reality we might reseed a hundred times
less often.

In places where prng was passed as true before, use MTRand now instead.

Signed-off-by: Heiko Hund <heiko@openvpn.net>
2023-11-22 04:49:31 +01:00
..
bio Using new numeric conversion tools 2023-08-23 18:44:29 +02:00
crypto Using new numeric conversion tools 2023-08-23 18:44:29 +02:00
pki OpenSSLPKI::x509_get_serial: Handle NULL result from BN_bn2dec 2023-11-08 21:27:50 +01:00
sign Addressed 2nd set of -Wconversion warnings 2023-08-21 13:51:50 +00:00
ssl introduce base types for strong and weak RNGs 2023-11-22 04:49:31 +01:00
util remove 'prng' argument from SSLLib::RandomAPI ctor 2023-11-22 04:49:31 +01:00
xkey xkey_helper: fix indentation of openvpn_msg_xkey_compat 2023-09-28 11:33:49 +02:00
compat.hpp digest.hpp: wrap EVP_MD_CTX into unique_ptr 2023-06-07 17:09:50 +02:00