[tor-bugs] #10402 [Tor]: Force disable use of RDRAND in OpenSSL when HardwareAccel is enabled

[Tor Bug Tracker & Wiki]

#10402: Force disable use of RDRAND in OpenSSL when HardwareAccel is enabled
------------------------+---------------------------------------------
     Reporter:  anon    |      Owner:
         Type:  defect  |     Status:  needs_review
     Priority:  major   |  Milestone:  Tor: 0.2.4.x-final
    Component:  Tor     |    Version:
   Resolution:          |   Keywords:  023-backport tor-relay security
Actual Points:          |  Parent ID:
       Points:          |
------------------------+---------------------------------------------
Changes (by nickm):

 * keywords:  024-backport tor-relay security => 023-backport tor-relay
     security
 * milestone:  Tor: 0.2.5.x-final => Tor: 0.2.4.x-final


Comment:

 Branch bug10402_redux_024 in my public repository takes the simpler
 approach.  Please review.  Does this work for you?

 (I am fairly sure that the other one did not work; when I added logging
 code to dump RAND_get_rand_method() and RAND_SSLeay(), and ran Tor with an
 empty state file, those methods were different before.)

--
Ticket URL: <https://trac.torproject.org:443/projects/tor/ticket/10402#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online