Stop pretending that openssl(1) applications support the -rand option.

The underlying code has long been removed, making this a no-op.

If your random subsystem actually requires that you seed it from a file,
then you really should go and buy a new random subsystem that was built
after 1990.

Diff from Brent Cook.

ok deraadt@

1 files changed, 0 insertions, 9 deletions

diff --git a/src/lib/libssl/src/apps/genrsa.c b/src/lib/libssl/src/apps/genrsa.c
index 300b4b0da2..9481dc4218 100644
--- a/src/lib/libssl/src/apps/genrsa.c
+++ b/src/lib/libssl/src/apps/genrsa.c
@@ -106,7 +106,6 @@ genrsa_main(int argc, char **argv)
 #ifndef OPENSSL_NO_ENGINE
         char *engine = NULL;
 #endif
-        char *inrand = NULL;
         BIO *out = NULL;
         BIGNUM *bn = BN_new();
         RSA *rsa = NULL;
@@ -143,11 +142,6 @@ genrsa_main(int argc, char **argv)
                         engine = *(++argv);
                 }
 #endif
-                else if (strcmp(*argv, "-rand") == 0) {
-                        if (--argc < 1)
-                                goto bad;
-                        inrand = *(++argv);
-                }
 #ifndef OPENSSL_NO_DES
                 else if (strcmp(*argv, "-des") == 0)
                         enc = EVP_des_cbc();
@@ -206,9 +200,6 @@ bad:
 #ifndef OPENSSL_NO_ENGINE
                 BIO_printf(bio_err, " -engine e       use engine e, possibly a hardware device.\n");
 #endif
-                BIO_printf(bio_err, " -rand file:file:...\n");
-                BIO_printf(bio_err, "                 load the file (or the files in the directory) into\n");
-                BIO_printf(bio_err, "                 the random number generator\n");
                 goto err;
         }
         ERR_load_crypto_strings();