1 files changed, 51 insertions, 0 deletions
diff --git a/server/resty/openssl/rand.lua b/server/resty/openssl/rand.lua
new file mode 100644
index 0000000..be54da9
--- /dev/null
+++ b/server/resty/openssl/rand.lua
@@ -0,0 +1,51 @@
+local ffi = require "ffi"
+local C = ffi.C
+local ffi_str = ffi.string
+
+require "resty.openssl.include.rand"
+local ctx_lib = require "resty.openssl.ctx"
+local ctypes = require "resty.openssl.auxiliary.ctypes"
+local format_error = require("resty.openssl.err").format_error
+local OPENSSL_3X = require("resty.openssl.version").OPENSSL_3X
+
+local buf
+local buf_size = 0
+local function bytes(length, private, strength)
+  if type(length) ~= "number" then
+    return nil, "rand.bytes: expect a number at #1"
+  elseif strength and type(strength) ~= "number" then
+    return nil, "rand.bytes: expect a number at #3"
+  end
+  -- generally we don't need manually reseed rng
+  -- https://www.openssl.org/docs/man1.1.1/man3/RAND_seed.html
+
+  -- initialize or resize buffer
+  if not buf or buf_size < length then
+    buf = ctypes.uchar_array(length)
+    buf_size = length
+  end
+
+  local code
+  if OPENSSL_3X then
+    if private then
+      code = C.RAND_priv_bytes_ex(ctx_lib.get_libctx(), buf, length, strength or 0)
+    else
+      code = C.RAND_bytes_ex(ctx_lib.get_libctx(), buf, length, strength or 0)
+    end
+  else
+    if private then
+      code = C.RAND_priv_bytes(buf, length)
+    else
+      code = C.RAND_bytes(buf, length)
+    end
+  end
+  if code ~= 1 then
+    return nil, format_error("rand.bytes", code)
+  end
+
+  return ffi_str(buf, length)
+end
+
+return {
+  bytes = bytes,
+}