On Thu, 23 Mar 2000, Robert Scardapane wrote:

> I am getting stuck in the same place as everyone else.  Can not make a certificate 
>because of the lack of "/dev/random" and can not start apache because the PRNG can 
>not be seeded.  If your system does not have such a device what do you do.  I tried 
>usi
ng the runtime directive to seed PRNG with "builtin" data (that fails).  I tried 
seeding from an external file - that fails.  I tried building $HOME/.rnd - that fails.
> 
> It would seem that the higher levels of mod_ssl has this problem as well.
> 
> Is there a solution or does the OS just have to have a "/dev/random" ?

1. You must have failed certain sections with 'make test' with 0.9.5. already. For it,

If you have root access:

    cp /path/to/a/big/file /dev/urandom # if you are on Solaris

Or:


    $ RANDFILE=/path/to/a/big/useless/file; export RANDFILE
    or
    setenv RANDFILE /path/to/a/big/useless/file

depending on what sh you use.

2. with apache:

set in httpd.conf:

SSLRandomSeed startup file:/path/to/a/big/useless/fil
SSLRandomSeed connect file:/path/to/a/big/useless/fil

Good luck!


Jie

Reply via email to