mirror of
https://github.com/postgres/postgres.git
synced 2025-11-04 20:11:56 +03:00
Add pg_strong_random_init function to initialize random number generator
Currently only OpenSSL requires this initialization, but in the future other SSL implementations are likely to need it as well. Abstracting this functionality out into a separate function makes this cleaner and more clear, and also removes the dependency on OpenSSL headers from fork_process.c. OpenSSL is special in that we need to initialize this random number generator even if we're not going to use it directly, until we drop support for everything prior to OpenSSL 1.1.1. (And of course also if we actually use it). All other implementations are left empty at this time, but more are expected to be added in the future. Author: Daniel Gustafsson <daniel@yesql.se>, Michael Paquier <michael@paquier.xyz> Reviewed-By: Magnus Hagander <magnus@hagander.net> Discussion: https://postgr.es/m/F6291C3C-747C-4C93-BCE0-28BB420B1FF5@yesql.se
This commit is contained in:
@@ -16,9 +16,6 @@
|
||||
#include <sys/stat.h>
|
||||
#include <sys/time.h>
|
||||
#include <unistd.h>
|
||||
#ifdef USE_OPENSSL
|
||||
#include <openssl/rand.h>
|
||||
#endif
|
||||
|
||||
#include "postmaster/fork_process.h"
|
||||
|
||||
@@ -108,14 +105,8 @@ fork_process(void)
|
||||
}
|
||||
}
|
||||
|
||||
/*
|
||||
* Make sure processes do not share OpenSSL randomness state. This is
|
||||
* no longer required in OpenSSL 1.1.1 and later versions, but until
|
||||
* we drop support for version < 1.1.1 we need to do this.
|
||||
*/
|
||||
#ifdef USE_OPENSSL
|
||||
RAND_poll();
|
||||
#endif
|
||||
/* do post-fork initialization for random number generation */
|
||||
pg_strong_random_init();
|
||||
}
|
||||
|
||||
return result;
|
||||
|
||||
Reference in New Issue
Block a user