Joshua
I've done some more poking around and I've gotten openssl to work -
atleast to the extent where I can successfully connect to my secure
webserver using ./openssl s_client.....
Once I got that working I figured I'd get a fresh start and
recompile/reinstall htdig. Now when I try to run ./htdig -i -vvvv I get
the following output:
> ./htdig -i -vvvvv
URL: https://www.myurl.com/ 1:0:https://www.myurl.com/
New server: www.myurl.com, 443
Unable to build connection with www.myurl.com:443
pushed
pick: www.myurl.com, # servers = 1
>
Any ideas?
Jason
Joshua Gerth wrote:
>
> Hi Jason,
>
> > When I try and run the openssl command below I get the following:
> >
> > > ./openssl s_client -host www.myurl.com -port 443
> > unable to load 'random state'
> > This means that the random number generator has not been seeded
> > with much random data.
> > Consider setting the RANDFILE environment variable to point at a file
> > that
> > 'random' data can be kept in (the file will be overwritten).
> > CONNECTED(00000004)
> > depth=1 /C=US/O=RSA Data Security, Inc./OU=Secure Server Certification
> > Authority
> > verify error:num=19:self signed certificate in certificate chain
> > verify return:0
> > 18499:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not
> > seeded:md_rand.c:474:You need to read the OpenSSL FAQ,
> > http://www.openssl.org/support/faq.html
> > >
> >
> > I'm running this on a SunOS 5.6 box. I've checked the openssl faq as
> > the error above suggests but could find anything concerning this.
> > Please let me know if you know what's going on.
>
> You are not going to like this but I think your problem is with openssl
> and not htdig/ssl. If the s_client can't connect to your url its unlikely
> that the htdig/ssl will be able to either. I am mainly just an openssl
> user so I'm not going to be of much help as to debugging openssl. Did you
> try setting the RANDFILE var like it suggests? I'm running on Linux which
> didn't have this problem.
>
> Sorry,
> Joshua
------------------------------------
To unsubscribe from the htdig mailing list, send a message to
[EMAIL PROTECTED]
You will receive a message to confirm this.
List archives: <http://www.htdig.org/mail/menu.html>
FAQ: <http://www.htdig.org/FAQ.html>
