I'm trying to install mod_ssl on Apache 1.3.12. I'm having a problem
at step 5b; when I do "make certificate" it asks me a bunch of
questions and then bombs with "prng not seeded error" (the full output
is below).
As per the faq I had created a $HOME/.rnd file in my home directory
and also in / since I'm doing this as root. I just copied my mbox
file (15190 bytes) to $HOME/.rnd. After I the ran the failing "make
certificate" the .rnd file in my home directory is changed to a binary
file, 1024 bytes in length.
I'm doing this on Solaris 2.7, sparcstation, compiling with
gcc-2.95.2.
My "configure shell script wrapper" for Apache is as follows:
CFLAGS=-O2 ; export CFLAGS
PATH=/usr/local/bin:${PATH} ; export PATH
# SYSTEM means it's already installed in /usr/local
SSL_BASE=SYSTEM ; export SSL_BASE
RSA_BASE=SYSTEM ; export RSA_BASE
sh configure \
--prefix=/grunt_a/apache \
--enable-rule=SHARED_CORE \
--enable-module=ssl \
--enable-shared=ssl \
--enable-module=so \
--enable-module=most \
--enable-shared=max
And for mod_ssl-2.6.4-1.3.12 my configure wrapper is
sh configure \
--with-apache=/grunt_a/apache/src/apache_1.3.12
For openssl-0.9.5 my wrapper is
sh config --prefix=/usr/local \
--openssldir=/usr/local/openssl \
-L/usr/local/lib \
-fPIC \
rsaref
And for rsaref I downloaded it off of some random place on the net as
per the mod_ssl instructions and compiled it using their makefile
(changing cc to gcc).
STEP 4: Enrypting RSA private key with a pass phrase for security [server.key]
The contents of the server.key file (the generated private key) has to be
kept secret. So we strongly recommend you to encrypt the server.key file
with a Triple-DES cipher and a Pass Phrase.
Encrypt the private key now? [Y/n]: y
read RSA key
writing RSA key
Enter PEM pass phrase:
Verifying password - Enter PEM pass phrase:
unable to write key
4407:error:24064064:random number generator:SSLEAY_RAND_BYTES:prng not
seeded:md_rand.c:470:
mkcert.sh:Error: Failed to encrypt RSA private key
*** Error code 1
make: Fatal error: Command failed for target `certificate'
Current working directory /grunt_a/apache/src/apache_1.3.12/src
*** Error code 1
make: Fatal error: Command failed for target `certificate'
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
