diff options
Diffstat (limited to 'main/apache2/conf/0008-httpd-ssl.conf-SSLRandomSeed.patch')
| -rw-r--r-- | main/apache2/conf/0008-httpd-ssl.conf-SSLRandomSeed.patch | 48 |
1 files changed, 48 insertions, 0 deletions
diff --git a/main/apache2/conf/0008-httpd-ssl.conf-SSLRandomSeed.patch b/main/apache2/conf/0008-httpd-ssl.conf-SSLRandomSeed.patch new file mode 100644 index 0000000000..7088022070 --- /dev/null +++ b/main/apache2/conf/0008-httpd-ssl.conf-SSLRandomSeed.patch @@ -0,0 +1,48 @@ +From ca356e7aa8b3b2fb441a831059d41ca53f705026 Mon Sep 17 00:00:00 2001 +From: Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> +Date: Fri, 11 Sep 2015 12:58:01 +0300 +Subject: [PATCH 08/14] httpd-ssl.conf: SSLRandomSeed + +--- + docs/conf/extra/httpd-ssl.conf.in | 3 ++- + docs/conf/httpd.conf.in | 10 +--------- + 2 files changed, 3 insertions(+), 10 deletions(-) + +diff --git a/docs/conf/extra/httpd-ssl.conf.in b/docs/conf/extra/httpd-ssl.conf.in +index 1680430..da506c8 100644 +--- a/docs/conf/extra/httpd-ssl.conf.in ++++ b/docs/conf/extra/httpd-ssl.conf.in +@@ -24,7 +24,8 @@ + # Manual for more details. + # + #SSLRandomSeed startup file:/dev/random 512 +-#SSLRandomSeed startup file:/dev/urandom 512 ++SSLRandomSeed startup file:/dev/urandom 512 ++SSLRandomSeed connect builtin + #SSLRandomSeed connect file:/dev/random 512 + #SSLRandomSeed connect file:/dev/urandom 512 + +diff --git a/docs/conf/httpd.conf.in b/docs/conf/httpd.conf.in +index 565fb01..47fe513 100644 +--- a/docs/conf/httpd.conf.in ++++ b/docs/conf/httpd.conf.in +@@ -417,15 +417,7 @@ Include @rel_sysconfdir@/extra/proxy-html.conf + + # Secure (SSL/TLS) connections + #Include @rel_sysconfdir@/extra/httpd-ssl.conf +-# +-# Note: The following must must be present to support +-# starting without SSL on platforms with no /dev/random equivalent +-# but a statically compiled-in mod_ssl. +-# +-<IfModule ssl_module> +-SSLRandomSeed startup builtin +-SSLRandomSeed connect builtin +-</IfModule> ++ + # + # uncomment out the below to deal with user agents that deliberately + # violate open standards by misusing DNT (DNT *must* be a specific +-- +2.5.0 + |