Re: Re: svn: /php/php-src/ branches/PHP_5_4/ext/openssl/openssl.c trunk/ext/openssl/openssl.c

From:	Chad Emrys	Date:	Wed, 20 Jul 2011 05:40:01 +0000
Subject:	Re: Re: svn: /php/php-src/ branches/PHP_5_4/ext/openssl/openssl.c trunk/ext/openssl/openssl.c
References:	1 2 3 4 5 6	Groups:	php.internals
Request:	Send a blank email to [email protected] to get a copy of this message

On 07/19/2011 07:09 PM, Pierre Joye wrote:
On Wed, Jul 20, 2011 at 1:50 AM, Scott MacVicar<[email protected]>  wrote:
OpenSSL has been FIPS certified, your change has changed this contract and it's calling back into a Windows API. Has it been reviewed for correctness?
And by the way, the CryptoAPI for the windows versions we support is
certified as well. Just in case you did not check yourself in the 1st
place.

Furter ref, http://technet.microsoft.com/en-us/library/cc750357.aspx

Cheers,
+1 for adding this fix.  right now I can't find a decent way to access any CSPRNG in PHP on Windows... in *nix at least I can always fread /dev/random as a last resort.


   

Thread (5 messages)

• Scott MacVicarTue, 19 Jul 2011 23:50:58 +0000
  • Pierre JoyeTue, 19 Jul 2011 23:59:14 +0000
  • Pierre JoyeWed, 20 Jul 2011 00:09:27 +0000
    • Chad EmrysWed, 20 Jul 2011 05:40:01 +0000
    • Thomas HruskaSun, 24 Jul 2011 00:27:27 +0000