[CRYPTO-96] OpenSSL Random implementation silently falls back to Java

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Assignee: Dapeng Sun
• Reporter: Sebb
• Created: 30/Jun/16 13:22
• Updated: 07/Jul/16 07:00
• Resolved: 07/Jul/16 07:00

Description

The OpensslRandom class silently falls back to using the Java implementation if the native code is loaded but the nextRandBytes method fails.

This seems wrong as it can cause unexpected results and mask problems.

The corresponding OpensslCipher class does not fall back to JCE.