[Python-Dev] Re: Problem with SSL and socketmodule on Debian Potato?

Martin v. Loewis martin@loewis.home.cs.tu-berlin.de
Fri, 13 Apr 2001 19:33:26 +0200


> No, this seems like a worse cure then the cause...

Can you elaborate? It cures the problem of the socket module not being
loadable...

> Why not put the whole if (RAND_status()) thing under the ifdef?  It
> was only added in 2.1, so at least we would be no worse off then in
> 2.0

AFAICT, under my patch, when using OpenSSL on a system with EGD, it
will do the right thing. On a system with /dev/random, it will produce
a runtime warning, then add insecure entropy - in addition to the
secure entropy already obtained from /dev/random.

Under what I think is your patch, it will do the right thing on a
system with /dev/random. On a system with EGD, it will fail because of
the missing entropy.

Regards,
Martin