From 23f3993127c0a05651e28701d91edb478ebe6efa Mon Sep 17 00:00:00 2001 From: "Dr. Matthias St. Pierre" Date: Wed, 13 Nov 2019 16:02:09 +0100 Subject: Remove RANDFILE settings from configuration files OpenSSL 1.1.1 introduced a new CSPRNG with an improved seeding mechanism, which makes it dispensable to define a RANDFILE for saving and restoring randomness. This commit removes the RANDFILE declarations from our own configuration files and adds documentation that this option is not needed anymore and retained mainly for compatibility reasons. Fixes #10433 Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/10436) --- demos/certs/apps/apps.cnf | 1 - demos/certs/ca.cnf | 1 - 2 files changed, 2 deletions(-) (limited to 'demos') diff --git a/demos/certs/apps/apps.cnf b/demos/certs/apps/apps.cnf index 531afe64b2..bd762b7ddc 100644 --- a/demos/certs/apps/apps.cnf +++ b/demos/certs/apps/apps.cnf @@ -5,7 +5,6 @@ # This definition stops the following lines choking if HOME or CN # is undefined. HOME = . -RANDFILE = $ENV::HOME/.rnd CN = "Not Defined" #################################################################### diff --git a/demos/certs/ca.cnf b/demos/certs/ca.cnf index 5a8a5f29ef..c75a71a6aa 100644 --- a/demos/certs/ca.cnf +++ b/demos/certs/ca.cnf @@ -5,7 +5,6 @@ # This definition stops the following lines choking if HOME or CN # is undefined. HOME = . -RANDFILE = $ENV::HOME/.rnd CN = "Not Defined" default_ca = ca -- cgit v1.2.3