52 |
|
ilog(LOG_TYPE_IRCD, "SSL error: %s", ERR_error_string(e, 0)); |
53 |
|
} |
54 |
|
|
55 |
< |
static void |
55 |
> |
void |
56 |
|
binary_to_hex(const unsigned char *bin, char *hex, unsigned int length) |
57 |
|
{ |
58 |
|
static const char trans[] = "0123456789ABCDEF"; |
69 |
|
int |
70 |
|
get_randomness(unsigned char *buf, int length) |
71 |
|
{ |
72 |
< |
/* Seed OpenSSL PRNG with EGD enthropy pool -kre */ |
73 |
< |
if (ConfigFileEntry.use_egd && ConfigFileEntry.egdpool_path) |
74 |
< |
if (RAND_egd(ConfigFileEntry.egdpool_path) == -1) |
75 |
< |
return -1; |
76 |
< |
|
77 |
< |
if (RAND_status()) |
78 |
< |
return RAND_bytes(buf, length); |
79 |
< |
/* XXX - abort? */ |
80 |
< |
return RAND_pseudo_bytes(buf, length); |
72 |
> |
return RAND_bytes(buf, length); |
73 |
|
} |
74 |
|
|
75 |
|
int |
82 |
|
if (!rsa) |
83 |
|
return -1; |
84 |
|
|
85 |
< |
get_randomness(secret, 32); |
85 |
> |
if (!get_randomness(secret, 32)) |
86 |
> |
{ |
87 |
> |
report_crypto_errors(); |
88 |
> |
return -1; |
89 |
> |
} |
90 |
> |
|
91 |
|
*r_response = MyCalloc(65); |
92 |
|
binary_to_hex(secret, *r_response, 32); |
93 |
|
|
96 |
|
ret = RSA_public_encrypt(32, secret, tmp, rsa, RSA_PKCS1_PADDING); |
97 |
|
|
98 |
|
*r_challenge = MyCalloc((length << 1) + 1); |
99 |
< |
binary_to_hex( tmp, *r_challenge, length); |
103 |
< |
(*r_challenge)[length << 1] = 0; |
99 |
> |
binary_to_hex(tmp, *r_challenge, length); |
100 |
|
MyFree(tmp); |
101 |
|
|
102 |
|
if (ret < 0) |