Apache will find /dev/urandom by default. Go to the web site at
http://www.cosy.sbg.ac.at/~andi/
and download the pkg for sol 2.7. Do a pkgadd -d on it. Walla! You now
have a /dev/urandom on your system. Now add the following to your
httpd.conf in the PRNG area.
SSLRandomSeed connect file:/dev/urandom 512
SSLRandomSeed startup file:/dev/urandom 512
"Oswaldo E. Aguirre M." wrote:
>
> On Wed, Aug 23, 2000 at 08:10:05AM -0700, Craig Shaver wrote:
> > What platform are you compiling with?
>
> I didnt tell you??! my mistake, sorry, I'm using Solaris 7, on ES450
> gcc version 2.95.2 19991024 (release)
>
> >
> > Solaris?
> >
> > Linux?
> >
> > The /dev/urandom replacement from http://www.cosy.sbg.ac.at/~andi/
> > dropped right in for me on a Solaris 2.6 x86 platform.
> >
> > If you install /dev/urandom the code will find it by default. Otherwise
> > you have to jump through the hoops to get the encryption seed.
>
> err.. what?!
>
> >
> >
> > "Oswaldo E. Aguirre M." wrote:
> > >
> > > On Wed, Aug 23, 2000 at 09:02:50AM -0400, Duane Gran wrote:
> > > > > > I have compiled and setup mod_ssl with open_ssl on a few systems in the
> > > > > > past, but I'm having some trouble today. I'm using the latest stable
> > > > > > version of mod_ssl, open_ssl and apache on Solaris 2.7.
> > > > > >
> > > > > > Apache is unable to start, via a the "apachectl startssl" or the regular
> > > > > > "apachectl start" commands. I see the following entry in the error_log:
> > > > > >
> > > > > > [Mon Aug 21 11:01:04 2000] [error] mod_ssl: Init: Failed to generate
> > > > > > temporary 512 bit RSA private key
> > > > > >
> > > > > > Has anyone else encountered this error, and if so, could you give some
> > > > > > hints about how to resolve it? Many thanks in advance.
> > > >
> > > > > It's a FAQ: http://www.modssl.org/docs/2.6/ssl_faq.html#ToC15 and
> > > > > http://www.openssl.org/support/faq.html#6
> > > >
> > > > I just wanted to give an update. I was able to solve this problem with
> > > > a free third party /dev/random and /dev/urandom implementation:
> > > >
> > > > http://www.cosy.sbg.ac.at/~andi/
> > > >
> > > > I hope this helps some others.
> > > >
> > >
> > > I tried to use the random.c, I compiled it but didnt attached:
> > > devfsadm: driver failed to attach: random
> > > Warning: Driver (random) successfully added to system but failed to attach
> > >
> > ...
> >
> >
> > --
> > Craig Shaver, Productivity Group
> > POB 60458 Sunnyvale, CA 94088 (650)390-0654
> > http://www.progroup.com/ mailto:[EMAIL PROTECTED]
>
> --
>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> ! __ __ _ ______ __ _ _ _ _(@)| The opinions here are expressed !
> ! /__) /_ /_\/ / / / / /| / | "as is", with no warranty of any!
> ! / \ /__/ /\__\___/_ /_/ _/ |/ | kind. Use them at your own risk.!
> ! | !
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> \ Oswaldo E. Aguirre M. \
> / Computer Science Engineer /
> \ Internet Services Coordinator \
> / [EMAIL PROTECTED] /
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--
Craig Shaver, Productivity Group
POB 60458 Sunnyvale, CA 94088 (650)390-0654
http://www.progroup.com/ mailto:[EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
