v0.31.2

src/proxy/websocket/handshake.rs

@@ -13,7 +13,7 @@ use http_body::{Body as HttpBody, Frame, SizeHint};
 use http_body_util::BodyExt;
 use hyper::upgrade::{OnUpgrade, Upgraded};
 use hyper_util::rt::TokioIo;
-use rand::{rngs::OsRng, RngCore};
+use rand::{rngs::SysRng, TryRng};
 use serde::Serialize;
 use sha1::{Digest, Sha1};
 use std::{
@@ -186,7 +186,7 @@ pub fn validate_h3(request: &Request) -> Result<Handshake> {
         "WebSocket version must be 13"
     );
     let mut nonce = [0u8; 16];
-    OsRng.fill_bytes(&mut nonce);
+    SysRng.try_fill_bytes(&mut nonce).expect("secure operating system random source unavailable");
     let key = STANDARD.encode(nonce);
     Ok(Handshake {
         accept: accept_for_key(&key),
@@ -229,7 +229,7 @@ pub fn validate_h2(request: &Request) -> Result<Handshake> {
         "WebSocket version must be 13"
     );
     let mut nonce = [0u8; 16];
-    OsRng.fill_bytes(&mut nonce);
+    SysRng.try_fill_bytes(&mut nonce).expect("secure operating system random source unavailable");
     let key = STANDARD.encode(nonce);
     Ok(Handshake {
         accept: accept_for_key(&key),