Mercurial > prosody-hg
view util/random.lua @ 14219:7f4fcbb1bbe4 13.0
certmanager: Drop embedded Mozilla TLSRef data in favour of util.tlsref
This adds a 'tls_profile_version' configuration option. If unspecified, it
will use the default profile version from util.tlsref. If specified, it must
be either a valid version (known to util.tlsref) or the value "latest".
This allows admins to pin to specific versions, go with the default (for the
best balance between security/stability) or always use the latest available
profiles.
| author | Matthew Wild <mwild1@gmail.com> |
|---|---|
| date | Fri, 12 Jun 2026 13:04:23 +0100 |
| parents | d10957394a3c |
| children |
line wrap: on
line source
-- Prosody IM -- Copyright (C) 2008-2014 Matthew Wild -- Copyright (C) 2008-2014 Waqas Hussain -- -- This project is MIT/X11 licensed. Please see the -- COPYING file in the source package for more information. -- local ok, crand = pcall(require, "prosody.util.crand"); if ok and pcall(crand.bytes, 1) then return crand; end local urandom, urandom_err = io.open("/dev/urandom", "r"); local function bytes(n) local data, err = urandom:read(n); if not data then if err then error("Unable to retrieve data from secure random number generator (/dev/urandom): "..tostring(err)); else error("Secure random number generator (/dev/urandom) returned an end-of-file condition"); end end return data; end if not urandom then function bytes() error("Unable to obtain a secure random number generator, please see https://prosody.im/doc/random ("..urandom_err..")"); end end return { bytes = bytes; _source = "/dev/urandom"; };
