Date: Mon, 31 Dec 2018 10:00:52 +0900
From: Michael Paquier <michael@paquier.xyz>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Postgres hackers <pgsql-hackers@lists.postgresql.org>,
	Heikki Linnakangas <hlinnaka@iki.fi>
Subject: Re: Removing --disable-strong-random from the code
Message-ID: <20181231010052.GA4522@paquier.xyz>
References: <20181230063219.GG608@paquier.xyz>
 <23371.1546152342@sss.pgh.pa.us>
 <20181230071549.GA2734@paquier.xyz>
 <20181230143740.GB2734@paquier.xyz>
 <20186.1546188423@sss.pgh.pa.us>
 <20532.1546189008@sss.pgh.pa.us>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="ew6BAiZeqk4r7MaW"
Content-Disposition: inline
In-Reply-To: <20532.1546189008@sss.pgh.pa.us>
Precedence: bulk


--ew6BAiZeqk4r7MaW
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Dec 30, 2018 at 11:56:48AM -0500, Tom Lane wrote:
> Oh, one more thought: the removal of the --disable-strong-random
> documentation stanza means there's no explanation of what to do
> to build on platforms without /dev/urandom.  Perhaps something
> like this in installation.sgml:
>=20
>       <para>
> -      You need <productname>OpenSSL</productname>, if you want to support
> -      encrypted client connections. The minimum required version is
> -      0.9.8.
> +      You need <productname>OpenSSL</productname> if you want to support
> +      encrypted client connections.  <productname>OpenSSL</productname>
> +      is also required for random number generation on platforms that
> +      do not have <filename>/dev/urandom</filename> (except Windows).
> +      The minimum required version is 0.9.8.
>       </para>

Okay, I have included something among those lines.
--
Michael

--ew6BAiZeqk4r7MaW
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=GI6X
-----END PGP SIGNATURE-----

--ew6BAiZeqk4r7MaW--