[AXIS2C-273] rampart_generate_nonce should not use rand()

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Component/s: rampart
• Assignee: Malinda Kaushalye Kapuruge
• Reporter: James Clark
• Created: 09/Sep/06 12:28
• Updated: 07/Apr/20 17:44
• Resolved: 11/Sep/06 05:43

Description

It's not thread-safe and it's not cryptographically strong. I believe openssl provides some functions for random number generation; use them instead.