From ca356e7aa8b3b2fb441a831059d41ca53f705026 Mon Sep 17 00:00:00 2001 From: Kaarle Ritvanen Date: Fri, 11 Sep 2015 12:58:01 +0300 Subject: [PATCH 08/14] httpd-ssl.conf: SSLRandomSeed --- docs/conf/extra/httpd-ssl.conf.in | 3 ++- docs/conf/httpd.conf.in | 10 +--------- 2 files changed, 3 insertions(+), 10 deletions(-) diff --git a/docs/conf/extra/httpd-ssl.conf.in b/docs/conf/extra/httpd-ssl.conf.in index 1680430..da506c8 100644 --- a/docs/conf/extra/httpd-ssl.conf.in +++ b/docs/conf/extra/httpd-ssl.conf.in @@ -24,7 +24,8 @@ # Manual for more details. # #SSLRandomSeed startup file:/dev/random 512 -#SSLRandomSeed startup file:/dev/urandom 512 +SSLRandomSeed startup file:/dev/urandom 512 +SSLRandomSeed connect builtin #SSLRandomSeed connect file:/dev/random 512 #SSLRandomSeed connect file:/dev/urandom 512 diff --git a/docs/conf/httpd.conf.in b/docs/conf/httpd.conf.in index 565fb01..47fe513 100644 --- a/docs/conf/httpd.conf.in +++ b/docs/conf/httpd.conf.in @@ -417,15 +417,7 @@ Include @rel_sysconfdir@/extra/proxy-html.conf # Secure (SSL/TLS) connections #Include @rel_sysconfdir@/extra/httpd-ssl.conf -# -# Note: The following must must be present to support -# starting without SSL on platforms with no /dev/random equivalent -# but a statically compiled-in mod_ssl. -# - -SSLRandomSeed startup builtin -SSLRandomSeed connect builtin - + # # uncomment out the below to deal with user agents that deliberately # violate open standards by misusing DNT (DNT *must* be a specific -- 2.5.0