[issue18747] Re-seed OpenSSL's PRNG after fork

[Christian Heimes]

Christian Heimes <lists at cheimes.de> added the comment:

I have no plans to work on the issue any more. OpenSSL 1.1.1 has fixed the RNG issue with a new DRBG implementation. Eventually all platforms will move to 1.1.1 because it also provides TLS 1.3.

In the mean time, application can work around the limitation by seeding OpenSSL by calling ssl.RAND_add().

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue18747>
_______________________________________