$ ./openssl req -x509 -new -nodes -out sscert.pem -rand /tmp/somefile Generating a 1024 bit RSA private key ............++++++ ..............................++++++ writing new private key to 'privkey.pem' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [AU]: State or Province Name (full name) [Some-State]: Locality Name (eg, city) []: Organization Name (eg, company) [Internet Widgits Pty Ltd]: Organizational Unit Name (eg, section) []: Common Name (eg, YOUR name) []: Email Address []:
Stephen Henson via RT wrote: > [[EMAIL PROTECTED] - Sat Feb 1 00:02:48 2003]: > > >>$ cd apps >>$ ./openssl req -x509 -new -nodes -out sscert.pem >> >>unable to load 'random state' >>This means that the random number generator has not been seeded >>with much random data. >>Generating a 1024 bit RSA private key >>8953:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not >>seeded:md_rand.c:503:You need to read the OpenSSL FAQ, >>http://www.openssl.org/support/faq.html >>8953:error:04069003:rsa routines:RSA_generate_key:BN >>lib:rsa_gen.c:182: >> >>it didn't get as far as asking any questions >> >> > > OK, the PRNG doesn't get seeded. So it should get further if you try: > > openssl req -x509 -new -nodes -out sscert.pem -randfile ./somefile > > where "somefile" is a file with some random data in it, any old text > file will do for this test. > > Steve. > -- wendy palm Cray OS Sustaining Engineering, Cray Inc. [EMAIL PROTECTED], 651-605-9154 ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
