From f9997e311c07ca5dd73d02fd70045f549230f623 Mon Sep 17 00:00:00 2001
From: Anders Kaseorg <anders@zulip.com>
Date: Thu, 24 Feb 2022 19:37:57 -0800
Subject: [PATCH] generate-self-signed-cert: Remove RANDFILE.
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This was not needed for OpenSSL ≥ 1.1.1 (all our supported platforms),
and breaks with OpenSSL ≥ 3.0.0 (Ubuntu 22.04).  It was removed from
the upstream configuration file too: https://bugs.debian.org/990228.

Signed-off-by: Anders Kaseorg <anders@zulip.com>
---
 scripts/setup/generate-self-signed-cert | 2 --
 1 file changed, 2 deletions(-)

diff --git a/scripts/setup/generate-self-signed-cert b/scripts/setup/generate-self-signed-cert
index dd1c0e8bd5..e9b71b79d6 100755
--- a/scripts/setup/generate-self-signed-cert
+++ b/scripts/setup/generate-self-signed-cert
@@ -77,8 +77,6 @@ cat >"$config" <<EOF
 # Based on /usr/share/ssl-cert/ssleay.cnf from Debian's \`ssl-cert\`
 # package, which is used for the system's snakeoil cert in /etc/ssl/.
 
-RANDFILE            = /dev/urandom
-
 [ req ]
 default_bits        = 2048
 distinguished_name  = req_distinguished_name