[Dovecot] Dovecot, Fedora, SSL

[Timo Sirainen]

With a little bit of thinking, maybe it's this simple to fix:

diff -u -r1.21 ssl-proxy-openssl.c
--- src/login-common/ssl-proxy-openssl.c	10 May 2004 02:15:16 -0000	1.21
+++ src/login-common/ssl-proxy-openssl.c	10 May 2004 20:03:26 -0000
@@ -460,9 +460,10 @@
 	}
 
 	/* PRNG initialization might want to use /dev/urandom, make sure it
-	   does it before chrooting. */
-	if (RAND_bytes(&buf, 1) != 1)
-		i_fatal("RAND_bytes() failed: %s\n", ssl_last_error());
+	   does it before chrooting. We might not have enough entropy at
+	   the first try, so this function may fail. It's still been
+	   initialized though. */
+	(void)RAND_bytes(&buf, 1);
 
         ssl_proxies = hash_create(default_pool, default_pool, 0, NULL, NULL);
 	ssl_initialized = TRUE;

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20040510/fbf7623a/attachment.pgp