Remove RANDFILE settings from configuration files
authorDr. Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Wed, 13 Nov 2019 15:02:09 +0000 (16:02 +0100)
committerDr. Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Sun, 24 Nov 2019 07:35:14 +0000 (08:35 +0100)
commit23f3993127c0a05651e28701d91edb478ebe6efa
tree6ee21d66ade039064e05a0078ca8c526b650d3af
parent0c080f73e8fc3cf7e73a42b15011d8a0a0c8aab7
Remove RANDFILE settings from configuration files

OpenSSL 1.1.1 introduced a new CSPRNG with an improved seeding
mechanism, which makes it dispensable to define a RANDFILE for
saving and restoring randomness. This commit removes the RANDFILE
declarations from our own configuration files and adds documentation
that this option is not needed anymore and retained mainly for
compatibility reasons.

Fixes #10433

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/10436)
23 files changed:
.gitignore
demos/certs/apps/apps.cnf
demos/certs/ca.cnf
doc/man1/openssl-ca.pod.in
doc/man1/openssl-req.pod.in
doc/man1/openssl-ts.pod.in
doc/man5/config.pod
test/CAss.cnf
test/CAssdh.cnf
test/CAssdsa.cnf
test/CAssrsa.cnf
test/CAtsa.cnf
test/P1ss.cnf
test/P2ss.cnf
test/Sssdsa.cnf
test/Sssrsa.cnf
test/Uss.cnf
test/conf_include_test.c
test/recipes/25-test_req.t
test/recipes/80-test_ssl_old.t
test/recipes/90-test_includes_data/conf-includes/includes1.cnf
test/smime-certs/ca.cnf
test/test.cnf