I'm trying to recreate this problem at the moment.

Which log is this listing taken from - I don't get any messages like this in any
log that I can find.

TIA,

Dave Smith


|--------+--------------------------------->
|        |          Lutz Jaenicke          |
|        |          <[EMAIL PROTECTED]|
|        |          ottbus.DE>             |
|        |                                 |
|        |          11/01/2001 10:58       |
|        |          Please respond to      |
|        |          modssl-users           |
|        |                                 |
|--------+--------------------------------->
  >----------------------------------------------------------------------------|
  |                                                                            |
  |       To:     [EMAIL PROTECTED]                                      |
  |       cc:     (bcc: David Smith/esoc/ESA)                                  |
  |       Subject:     Re: Apache startup problem                              |
  >----------------------------------------------------------------------------|





On Thu, Jan 11, 2001 at 10:43:45AM +0100, [EMAIL PROTECTED] wrote:
> On Thu, Jan 11, 2001 at 10:19AM +0100, [EMAIL PROTECTED] wrote:
> > Did you think of pointing apache to the socket of your already running egd
> > in httpd.conf?
> > ...
> > SSLRandomSeed startup egd:/var/run/egd-pool
> > ...
>
> Well, I'm using /etc/entropy rather than /var/run/egd-pool, but yes, I've got
>
> SSLRandomSeed startup egd:/etc/entropy
>
> in my httpd.conf. It wouldn't have started at all without that, surely?

If you omit this statement, the OpenSSL library would still try /dev/urandom,
so it would not immediatly fail.
My httpd (HP-UX) is configured as:
SSLRandomSeed startup builtin
SSLRandomSeed startup egd:/var/run/egd-pool
SSLRandomSeed connect builtin
SSLRandomSeed connect egd:/var/run/egd-pool

On startup I can read:
[03/Jan/2001 17:00:31 24413] [info]  Server: Apache/1.3.14, Interface:
mod_ssl/2.7.1, Library: OpenSSL/0.9.6
[03/Jan/2001 17:00:31 24413] [info]  Init: 1st startup round (still not
detached)
[03/Jan/2001 17:00:31 24413] [info]  Init: Initializing OpenSSL library
[03/Jan/2001 17:00:31 24413] [info]  Init: Loading certificate & private key of
SSL-aware server www.aet.tu-cottbus.de:443
[03/Jan/2001 17:00:31 24413] [info]  Init: Seeding PRNG with 391 bytes of
entropy
[03/Jan/2001 17:00:31 24413] [info]  Init: Generating temporary RSA private keys
(512/1024 bits)
[03/Jan/2001 17:00:39 24413] [info]  Init: Configuring temporary DH parameters
(512/1024 bits)
[03/Jan/2001 17:00:39 24414] [info]  Init: 2nd startup round (already detached)
[03/Jan/2001 17:00:39 24414] [info]  Init: Reinitializing OpenSSL library
[03/Jan/2001 17:00:39 24414] [info]  Init: Seeding PRNG with 391 bytes of
entropy
[03/Jan/2001 17:00:39 24414] [info]  Init: Configuring temporary RSA private
keys (512/1024 bits)
[03/Jan/2001 17:00:39 24414] [info]  Init: Configuring temporary DH parameters
(512/1024 bits)
[03/Jan/2001 17:00:39 24414] [info]  Init: Initializing (virtual) servers for
SSL
[03/Jan/2001 17:00:39 24414] [info]  Init: Configuring server
www.aet.tu-cottbus.de:443 for SSL protocol

What is your "Seeding PRNG with" information?

Best regards,
     Lutz
--
Lutz Jaenicke                             [EMAIL PROTECTED]
BTU Cottbus               http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik                  Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus              Fax. +49 355 69-4153
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]



______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to