Improvement to Java security random source. Fixes #4857.

Apparently the JDK will fail to use the egd path without a file URL. Stop the madness! See https://bz.apache.org/bugzilla/show_bug.cgi?id=56139
jruby · Nov 21, 2017 · fe83edd · fe83edd
1 parent 2565797
commit fe83edd
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/bin/jruby.bash b/bin/jruby.bash
@@ -180,10 +180,12 @@ fi
 # ----- Execute The Requested Command -----------------------------------------
 JAVA_ENCODING=""
 
-if [ -e "/dev/urandom" ]; then
+if [ -r "/dev/urandom" ]; then
   # OpenJDK tries really hard to prevent you from using urandom.
   # See https://bugs.openjdk.java.net/browse/JDK-6202721
-  JAVA_SECURITY_EGD="/dev/./urandom"
+  # Non-file URL causes fallback to slow threaded SeedGenerator.
+  # See https://bz.apache.org/bugzilla/show_bug.cgi?id=56139
+  JAVA_SECURITY_EGD="file:/dev/urandom"
 fi
 
 declare -a java_args