[Reproducible-builds] Bug#795897: pound: please make the build reproducible

[Reiner Herrmann]

Source: pound
Version: 2.6-6.1
Severity: wishlist
User: reproducible-builds at lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-builds at lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that pound could not be built reproducibly.

During build "openssl dhparam" is used to generate C header files containing
DH parameters, which are not reproducible.
Those are always randomly generated. Even when seeded with "-rand /filename",
openssl reads from /dev/urandom to generate them.

I'm not sure what the best solution would be to make it reproducible.
Perhaps the header files can be pre-generated and included in the source package?

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds