From 67bd6f9ccd53630fd22fde32b8d6ad2186f38d99 Mon Sep 17 00:00:00 2001 From: Dan Fandrich Date: Fri, 4 Mar 2005 20:10:29 +0000 Subject: Don't try to read the whole of the random file because when /dev/urandom is used, it slows initialization too much reading an infinitely long file! --- lib/ssluse.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/ssluse.c b/lib/ssluse.c index 0a6868d51..ed4ecf205 100644 --- a/lib/ssluse.c +++ b/lib/ssluse.c @@ -169,7 +169,7 @@ int random_the_seed(struct SessionHandle *data) /* let the option override the define */ nread += RAND_load_file((data->set.ssl.random_file? data->set.ssl.random_file:RANDOM_FILE), - -1); /* -1 to read the entire file */ + 16384); /* bounded size in case it's /dev/urandom */ if(seed_enough(nread)) return nread; } @@ -231,7 +231,7 @@ int random_the_seed(struct SessionHandle *data) RAND_file_name(buf, BUFSIZE); if(buf[0]) { /* we got a file name to try */ - nread += RAND_load_file(buf, -1); + nread += RAND_load_file(buf, 16384); if(seed_enough(nread)) return nread; } -- cgit v1.2.3