[JIRA] Resolved: (SSPCPP-391) Generation of keys for relay state is not strongly random

[Scott Cantor (JIRA)]

     [ https://issues.shibboleth.net/jira/browse/SSPCPP-391?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor resolved SSPCPP-391.
---------------------------------

    Resolution: Fixed

http://svn.shibboleth.net/view/cpp-sp?view=revision&revision=3518

> Generation of keys for relay state is not strongly random
> ---------------------------------------------------------
>
>                 Key: SSPCPP-391
>                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-391
>             Project: Shibboleth SP - C++
>          Issue Type: Bug
>          Components: Session Initiation
>    Affects Versions: 2.4, 2.4.1, 2.4.2, 2.4.3
>            Reporter: Scott Cantor
>            Assignee: Scott Cantor
>             Fix For: 2.5
>
>   Original Estimate: 3 hours
>  Remaining Estimate: 3 hours
>
> Some of the relay state types are using weak PRNGs and causing collisions under load. It should be possible to switch them to the cryptographic source.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira