[25807] in CVS-changelog-for-Kerberos-V5
svn rev #25297: trunk/src/lib/crypto/krb/
daemon@ATHENA.MIT.EDU (ghudson@mit.edu)
Tue Oct 4 11:11:48 2011
Date: Tue, 4 Oct 2011 11:11:46 -0400
From: ghudson@mit.edu
Message-Id: <201110041511.p94FBkdp023602@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
http://src.mit.edu/fisheye/changelog/krb5/?cs=25297
Commit By: ghudson
Log Message:
Improve k5_get_os_entropy for Windows.
When acquiring a crypto context for CryptGenRandom, pass
CRYPT_VERIFYCONTEXT to indicate that we don't need access to private
keys. Appears to make OS entropy work on Windows XP.
Changed Files:
U trunk/src/lib/crypto/krb/prng.c
Modified: trunk/src/lib/crypto/krb/prng.c
===================================================================
--- trunk/src/lib/crypto/krb/prng.c 2011-10-03 20:15:27 UTC (rev 25296)
+++ trunk/src/lib/crypto/krb/prng.c 2011-10-04 15:11:45 UTC (rev 25297)
@@ -41,7 +41,8 @@
krb5_boolean result;
HCRYPTPROV provider;
- if (!CryptAcquireContext(&provider, NULL, NULL, PROV_RSA_FULL, 0))
+ if (!CryptAcquireContext(&provider, NULL, NULL, PROV_RSA_FULL,
+ CRYPT_VERIFYCONTEXT))
return FALSE;
result = CryptGenRandom(provider, len, buf);
(void)CryptReleaseContext(provider, 0);
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5