Allow alternate random number generators for SSL seed

  • Thread starter Thread starter timk
  • Start date Start date
Status
Not open for further replies.
T

timk

Guest
Nature of request: Request Connect ODBC and JDBC drivers to allow specification of the location of the random number generator to be used as a seed for SSL key generation for encryption. Use case/rationale: The drivers are hard-coded to use /dev/random for the generation of the random number used by SSL. In some instances the entropy required for /dev/random to return are low, and this causes a block on the call, resulting in unacceptable delays. Other random number generators use different sources for entropy, and don’t have the delays associated with /dev/random. Using these would be preferable for some people. Evaluation of possible alternatives: Creating a symbolic link from /dev/random to the desired random number generator is possible, but not encouraged in every environment.

Continue reading...
 
Status
Not open for further replies.
Back
Top