diff options
| author | Nick Mathewson <nickm@torproject.org> | 2012-01-09 17:40:11 -0500 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2012-01-10 11:15:35 -0500 |
| commit | d29a3907338bd012ce5707e0e052747da87b3ba4 (patch) | |
| tree | 25d027ada04ec74bac40609ab9b2321a971b593e /src/common/crypto.c | |
| parent | b443d6a4fbfaac8d4a944d8b2a763666d1683ada (diff) | |
| download | tor-d29a3907338bd012ce5707e0e052747da87b3ba4.tar tor-d29a3907338bd012ce5707e0e052747da87b3ba4.tar.gz | |
Test for broken counter-mode at runtime
To solve bug 4779, we want to avoid OpenSSL 1.0.0's counter mode.
But Fedora (and maybe others) lie about the actual OpenSSL version,
so we can't trust the header to tell us if it's safe.
Instead, let's do a run-time test to see whether it's safe, and if
not, use our built-in version.
fermenthor contributed a pretty essential fixup to this patch. Thanks!
Diffstat (limited to 'src/common/crypto.c')
| -rw-r--r-- | src/common/crypto.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/common/crypto.c b/src/common/crypto.c index 35d6dfadc..364b6a778 100644 --- a/src/common/crypto.c +++ b/src/common/crypto.c @@ -281,6 +281,7 @@ crypto_global_init(int useAccel, const char *accelName, const char *accelDir) } evaluate_evp_for_aes(-1); + evaluate_ctr_for_aes(); return crypto_seed_rng(1); } |