libexpat and XML_POOR_ENTROPY

[Ben Walton]

On Fri 25 Feb 2022, 11:39 Jeffrey Walton via users, <users at lists.opencsw.org>
wrote:

> Hi Everyone,
>
> I was looking at the libexpat recipe again. This kind of jumps out
> from
> https://sourceforge.net/p/gar/code/HEAD/tree/csw/mgar/pkg/libexpat1/trunk/Makefile#l42
> :
>
> # No high-entropy random in old Solaris versions
> EXTRA_CPPFLAGS += -DXML_POOR_ENTROPY
>
> Solaris has /dev/urandom. It meets requirements. As far as I know,
> even the earlier versions of the device were sufficient for
> cryptographic needs. It may be time to revisit that define.
>

Yeah, I'd drop it and see that it passes the test suite. Not sure how far
back you'd need to go os and hardware worse to still need it, but arms
pretty ancient to me.



> My apologies if I am missing something.
>
> Jeff
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.opencsw.org/pipermail/users/attachments/20220225/62d2df74/attachment.html>