a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

36ef8f77bffe75d1aa327882be1b5bdbe2ff567asf /* ``The generation of random

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe#include "mod_ssl.h"

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowestatic int ssl_rand_choosenum(int, int);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowestatic int ssl_rand_feedfp(apr_pool_t *, apr_file_t *, int);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wroweint ssl_rand_seed(server_rec *s, apr_pool_t *p, ssl_rsctx_t nCtx, char *prefix)

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe{

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe SSLModConfigRec *mc;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe apr_array_header_t *apRandSeed;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe ssl_randseed_t *pRandSeeds;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe ssl_randseed_t *pRandSeed;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe unsigned char stackdata[256];

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe int nReq, nDone;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe apr_file_t *fp;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe int i, n, l;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe mc = myModConfig(s);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nReq = 0;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nDone = 0;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe apRandSeed = mc->aRandSeed;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe pRandSeeds = (ssl_randseed_t *)apRandSeed->elts;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe for (i = 0; i < apRandSeed->nelts; i++) {

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe pRandSeed = &pRandSeeds[i];

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe if (pRandSeed->nCtx == nCtx) {

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nReq += pRandSeed->nBytes;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe if (pRandSeed->nSrc == SSL_RSSRC_FILE) {

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe /*

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe if (apr_file_open(&fp, pRandSeed->cpPath,

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe APR_READ, APR_OS_DEFAULT, p) != APR_SUCCESS)

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe continue;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nDone += ssl_rand_feedfp(p, fp, pRandSeed->nBytes);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe apr_file_close(fp);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe }

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe else if (pRandSeed->nSrc == SSL_RSSRC_EXEC) {

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe /*

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe if ((fp = ssl_util_ppopen(s, p, apr_psprintf(p, "%s %d",

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe pRandSeed->cpPath, pRandSeed->nBytes))) == NULL)

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe continue;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nDone += ssl_rand_feedfp(p, fp, pRandSeed->nBytes);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe ssl_util_ppclose(s, p, fp);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe }

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe#if SSL_LIBRARY_VERSION >= 0x00905100

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe else if (pRandSeed->nSrc == SSL_RSSRC_EGD) {

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe /*

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe if ((n = RAND_egd(pRandSeed->cpPath)) == -1)

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe continue;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nDone += n;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe }

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe#endif

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe else if (pRandSeed->nSrc == SSL_RSSRC_BUILTIN) {

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe struct {

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe time_t t;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe pid_t pid;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe } my_seed;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe /*

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe my_seed.t = time(NULL);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe /*

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe my_seed.pid = mc->pid;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe l = sizeof(my_seed);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe RAND_seed((unsigned char *)&my_seed, l);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nDone += l;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe /*

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe n = ssl_rand_choosenum(0, sizeof(stackdata)-128-1);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe RAND_seed(stackdata+n, 128);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nDone += 128;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe#if XXX_SBENTROPY_SOLVED

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe /*

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe if (ap_scoreboard_image != NULL) {

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe n = ssl_rand_choosenum(0, sizeof(scoreboard)-1024-1);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe RAND_seed(((unsigned char *)ap_scoreboard_image)+n, 1024);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nDone += 1024;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe }

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe#endif

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe }

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe }

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe }

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe ssl_log(s, SSL_LOG_INFO, "%sSeeding PRNG with %d bytes of entropy", prefix, nDone);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe#if SSL_LIBRARY_VERSION >= 0x00905100

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe if (RAND_status() == 0)

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe ssl_log(s, SSL_LOG_WARN, "%sPRNG still contains not sufficient entropy!", prefix);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe#endif

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe return nDone;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe}

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe#define BUFSIZE 8192

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowestatic int ssl_rand_feedfp(apr_pool_t *p, apr_file_t *fp, int nReq)

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe{

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe apr_size_t nDone;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe unsigned char caBuf[BUFSIZE];

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe apr_size_t nBuf;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe apr_size_t nRead;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe apr_size_t nTodo;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nDone = 0;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nRead = BUFSIZE;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nTodo = nReq;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe while (1) {

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe if (nReq > 0)

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nRead = (nTodo < BUFSIZE ? nTodo : BUFSIZE);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nBuf = nRead;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe if (apr_file_read(fp, caBuf, &nBuf) != APR_SUCCESS)

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe break;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe RAND_seed(caBuf, nBuf);

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nDone += nBuf;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe if (nReq > 0) {

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe nTodo -= nBuf;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe if (nTodo <= 0)

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe break;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe }

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe }

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe return nDone;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe}

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowestatic int ssl_rand_choosenum(int l, int h)

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe{

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe int i;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe char buf[50];

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe apr_snprintf(buf, sizeof(buf), "%.0f",

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe (((double)(rand()%RAND_MAX)/RAND_MAX)*(h-l)));

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe i = atoi(buf)+1;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe if (i < l) i = l;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe if (i > h) i = h;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe return i;

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe}

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe

a1a4e55fb7678118a8334019c18509c248b0c0b3wrowe