Return-Path: Delivered-To: apmail-jakarta-tomcat-dev-archive@jakarta.apache.org Received: (qmail 48513 invoked by uid 500); 5 Sep 2001 04:51:34 -0000 Mailing-List: contact tomcat-dev-help@jakarta.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: list-post: Reply-To: tomcat-dev@jakarta.apache.org Delivered-To: mailing list tomcat-dev@jakarta.apache.org Received: (qmail 48501 invoked from network); 5 Sep 2001 04:51:34 -0000 Date: Tue, 4 Sep 2001 21:51:14 -0700 From: David Rees To: tomcat-dev@jakarta.apache.org Subject: Re: cvs commit: jakarta-tomcat/src/share/org/apache/tomcat/util SessionIdGenerator.java Message-ID: <20010904215114.A4060@runt.ebetinc.com> Mail-Followup-To: David Rees , tomcat-dev@jakarta.apache.org References: <20010905024214.23262.qmail@icarus.apache.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010905024214.23262.qmail@icarus.apache.org>; from marcsaeg@apache.org on Wed, Sep 05, 2001 at 02:42:14AM -0000 X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N On Wed, Sep 05, 2001 at 02:42:14AM -0000, marcsaeg@apache.org wrote: > marcsaeg 01/09/04 19:42:14 > > Modified: src/share/org/apache/tomcat/startup Tag: tomcat_32 > Tomcat.java > src/share/org/apache/tomcat/util Tag: tomcat_32 > SessionIdGenerator.java > Log: > Switch back to the default PRNG seed generator to avoid security weakness > in the manual seed generator. The PRNG is now initialized when the container > starts so that we don't take the hit on the first request. > > Submitted by: Kevin E. Fu (fubob@cisco.com) Does this prevent Tomcat from accepting requests until after the PRNG is initialized? If so, IMHO Tomcat should accept requests ASAP, even if it can't completely serve them until the PRNG is accepted. Isn't that better than rejecting requests? -Dave