openbsd/src/lib/libcrypto/rand/rand.h, branch OPENBSD_6_8_BASE

Place most of the RAND_* functions under #ifndef LIBRESSL_INTERNAL (some

2014-10-22T14:02:52+00:00

are still needed for the engine). Our code should use arc4random instead.

Explicitly include in every file that references

2014-07-10T22:45:58+00:00

an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers.

tags as requested by miod and tedu

2014-06-12T15:49:31+00:00

KNF.

2014-05-24T15:25:23+00:00

Another e_os2.h -> opensslconf.h.

2014-05-24T10:12:33+00:00

egd support is too dangerous to leave where somebody might find it.

2014-04-18T13:13:50+00:00

ok deraadt.

Replace the old OpenSSL PRNG by direct use of arc4random_buf(), keeping the

2014-04-15T16:52:50+00:00

existing RAND interfaces unchanged. All interfaces allowing external feed or seed of the RNG (either from a file or a local entropy gathering daemon) are kept for ABI compatibility, but are no longer do anything. While the OpenSSL PRNG was required 15+ years ago when many systems lacked proper entropy collection, things have evolved and one can reasonably assume it is better to use the kernel (system global) entropy pool rather than trying to build one's own and having to compensate for thread scheduling... Whoever thought that RAND_screen(), feeding the PRNG with the contents of the local workstation's display, under Win32, was a smart idea, ought to be banned from security programming. ok beck@ deraadt@ tedu@

Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery.

2014-04-13T15:25:35+00:00

resolve conflicts

2012-10-13T21:25:14+00:00

resolve conflicts, fix local changes

2010-10-01T22:59:01+00:00