[Pkg-openssl-devel] Bug#689490: openssl: using openssl from maintainer scripts creates /root/.rnd

[Sebastian Andrzej Siewior]

On 2016-05-26 23:11:13 [+0200], Kurt Roeckx wrote:
> > So do we feel like changing something or sitting that one out until post new
> > RNG code? I *guess* a patch to allow using /dev/urandom instead of .rnd will
> > be deferred until the new RNG is there.
> 
> I guess I didn't look close enough to how it works now, but it
> should also use /dev/urandom.

Iit looks at an environment variable first. If that one is not there is goes for
$HOME/.rnd unless setuid. If $HOME is missing it will go for /dev/srandom and
something else on OpenBSD (this is replay from memory).

So we could ask people to set the env-variale in maintainers script to
/dev/urandom be done with it (or in dh).

> Kurt

Sebastian