From: Phil Pennock <pdp@exim.org>
Date: Tue, 2 Apr 2013 16:37:03 +0000 (-0400)
Subject: Ensure OpenSSL entropy state reset across forks.
X-Git-Tag: exim-4_82_RC2~64
X-Git-Url: https://git.exim.org/users/jgh/exim.git/commitdiff_plain/de6135a0cbbeb4fbae7233a40563a241de1c237b?ds=inline;hp=de6135a0cbbeb4fbae7233a40563a241de1c237b

Ensure OpenSSL entropy state reset across forks.

Note that this function is never going to be called pre-fork unless the
admin is doing something highly unusual with ${randint:..} in a context
evaluated in the listening daemon.  Other forks should result in a
re-exec(), thus resetting state.

Nonetheless, be more cautious, explicitly reset state.

Fix per PostgreSQL.

PS: why does OpenSSL not document RAND_cleanup() on the same page as all
    the other entropy pool maintenance functions?
---