From 308b0b2760d6cb218003768747346d31764f1cfe Mon Sep 17 00:00:00 2001 From: Alon Bar-Lev Date: Fri, 19 Oct 2018 23:19:48 +0300 Subject: [PATCH] crypto: use ENGINE_load_rdrand with recent openssl libressl and probably older openssl do not support this. Signed-off-by: Alon Bar-Lev --- src/lib/crypto/OSSLCryptoFactory.cpp | 2 ++ 1 file changed, 2 insertions(+) https://github.com/opendnssec/SoftHSMv2/pull/423 diff --git a/src/lib/crypto/OSSLCryptoFactory.cpp b/src/lib/crypto/OSSLCryptoFactory.cpp index dc5f737..04d383d 100644 --- a/src/lib/crypto/OSSLCryptoFactory.cpp +++ b/src/lib/crypto/OSSLCryptoFactory.cpp @@ -141,8 +141,10 @@ OSSLCryptoFactory::OSSLCryptoFactory() // Initialise OpenSSL OpenSSL_add_all_algorithms(); +#if !( OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) ) // Make sure RDRAND is loaded first ENGINE_load_rdrand(); +#endif // Locate the engine rdrand_engine = ENGINE_by_id("rdrand"); // Use RDRAND if available -- 2.18.1