From 2ffdb5a82ab11ee29d773ac3ed9669265e242522 Mon Sep 17 00:00:00 2001 From: Jakob Borg Date: Fri, 13 Jun 2014 01:49:30 +0200 Subject: [PATCH] Actually generate random certificate serials (fixes #361) --- cmd/syncthing/gui.go | 2 +- cmd/syncthing/main.go | 11 +++++++---- 2 files changed, 8 insertions(+), 5 deletions(-) diff --git a/cmd/syncthing/gui.go b/cmd/syncthing/gui.go index b0749484..56247d29 100644 --- a/cmd/syncthing/gui.go +++ b/cmd/syncthing/gui.go @@ -59,7 +59,7 @@ func startGUI(cfg config.GUIConfiguration, assetDir string, m *model.Model) erro cert, err := loadCert(confDir, "https-") if err != nil { l.Infoln("Loading HTTPS certificate:", err) - l.Infoln("Creating new HTTPS certificate", err) + l.Infoln("Creating new HTTPS certificate") newCertificate(confDir, "https-") cert, err = loadCert(confDir, "https-") } diff --git a/cmd/syncthing/main.go b/cmd/syncthing/main.go index 57c7e929..5a2c58a8 100644 --- a/cmd/syncthing/main.go +++ b/cmd/syncthing/main.go @@ -107,6 +107,10 @@ The following enviroment variables are interpreted by syncthing: STGUIASSETS Directory to load GUI assets from. Overrides compiled in assets.` ) +func init() { + rand.Seed(time.Now().UnixNano()) +} + func main() { var reset bool var showVersion bool @@ -354,8 +358,7 @@ func main() { if cfg.Options.UPnPEnabled { // We seed the random number generator with the node ID to get a // repeatable sequence of random external ports. - rand.Seed(certSeed(cert.Certificate[0])) - externalPort = setupUPnP() + externalPort = setupUPnP(rand.NewSource(certSeed(cert.Certificate[0]))) } // Routine to connect out to configured nodes @@ -426,7 +429,7 @@ func waitForParentExit() { l.Okln("Continuing") } -func setupUPnP() int { +func setupUPnP(r rand.Source) int { var externalPort = 0 if len(cfg.Options.ListenAddress) == 1 { _, portStr, err := net.SplitHostPort(cfg.Options.ListenAddress[0]) @@ -438,7 +441,7 @@ func setupUPnP() int { igd, err := upnp.Discover() if err == nil { for i := 0; i < 10; i++ { - r := 1024 + rand.Intn(65535-1024) + r := 1024 + int(r.Int63()%(65535-1024)) err := igd.AddPortMapping(upnp.TCP, r, port, "syncthing", 0) if err == nil { externalPort = r