I have installed the ANDIrand 0.3 package for Solaris 2.6.

# ls -la /dev/random /dev/urandom
lrwxrwxrwx   1 root     other         33 Sep  1 11:41 /dev/random -> 
../devices/pseudo/random@0:random
lrwxrwxrwx   1 root     other         34 Sep  1 11:41 /dev/urandom -> 
../devices/pseudo/random@0:urandom
# 

I have added the following entries to my httpsd.conf file:

SSLRandomSeed startup file:/dev/urandom 1024
SSLRandomSeed connect file:/dev/urandom 1024

I HUPped the apache root process.

In my ssl_errors.log file, I see the following:

[01/Sep/2000 12:22:38 04543] [info]  Connection to child 0 established (server 
www.library.carleton.ca:443, client 134.117.10.91)
[01/Sep/2000 12:22:38 04543] [info]  Seeding PRNG with 0 bytes of entropy
[01/Sep/2000 12:22:39 04543] [info]  Connection: Client IP: 134.117.10.91, Protocol: 
SSLv2, Cipher: RC4-MD5 (128/128 bits)
[01/Sep/2000 12:22:39 04543] [info]  Initial (No.1) HTTPS request received for child 0 
(server www.library.carleton.ca:443)
[01/Sep/2000 12:22:39 04543] [info]  Connection to child 0 closed with standard 
shutdown (server www.library.carleton.ca:443, client 134.117.10.91)

The SSL sessions *appear* to work okay...

The PRNG was seeded when apache was HUPped with 1160 bytes of entropy,
according to the log; but after that, it only reports 0 bytes on connect.
Is this correct behaviour, or have I missed something?
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to