[25807] in CVS-changelog-for-Kerberos-V5

home help back first fref pref prev next nref lref last post

svn rev #25297: trunk/src/lib/crypto/krb/

daemon@ATHENA.MIT.EDU (ghudson@mit.edu)
Tue Oct 4 11:11:48 2011

Date: Tue, 4 Oct 2011 11:11:46 -0400
From: ghudson@mit.edu
Message-Id: <201110041511.p94FBkdp023602@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu

http://src.mit.edu/fisheye/changelog/krb5/?cs=25297
Commit By: ghudson
Log Message:
Improve k5_get_os_entropy for Windows.

When acquiring a crypto context for CryptGenRandom, pass
CRYPT_VERIFYCONTEXT to indicate that we don't need access to private
keys.  Appears to make OS entropy work on Windows XP.


Changed Files:
U   trunk/src/lib/crypto/krb/prng.c
Modified: trunk/src/lib/crypto/krb/prng.c
===================================================================
--- trunk/src/lib/crypto/krb/prng.c	2011-10-03 20:15:27 UTC (rev 25296)
+++ trunk/src/lib/crypto/krb/prng.c	2011-10-04 15:11:45 UTC (rev 25297)
@@ -41,7 +41,8 @@
     krb5_boolean result;
     HCRYPTPROV provider;
 
-    if (!CryptAcquireContext(&provider, NULL, NULL, PROV_RSA_FULL, 0))
+    if (!CryptAcquireContext(&provider, NULL, NULL, PROV_RSA_FULL,
+                             CRYPT_VERIFYCONTEXT))
         return FALSE;
     result = CryptGenRandom(provider, len, buf);
     (void)CryptReleaseContext(provider, 0);

_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5

home help back first fref pref prev next nref lref last post