Robert Joop schrieb:
> 
> On 02-04-24 10:55:59 CEST, Michael Bell wrote:
> > Robert Joop schrieb:
> > >
> > > On 02-04-24 00:40:06 CEST, Josef Vesely wrote:
> >
> > > > My error-ssl.log is full of "unable to write 'random state'" messages. Do you
> > > > know, what should be wrong?
> > >
> > > for cryptography, you need a lot of random bytes (you don't anyone to
> > > guess your keys, do you?). since truely random bytes are hard to get, it
> > > tries to keep them around in a file for later use.
> > > this file cannot be written.
> > > you should check the file's permissions.
> >
> > Must this file exist before using OpenSSL?
> 
> i guess not.
> but if you want to create a file, you need write permissions to the
> directory.
> 
> > (We don't create var/crypto/keys/.rand. We only use this file in
> > openssl.cnf.)
> 
> what perms does var/crypto/keys have?

755 (owner is the webserver and it's group, so it's not a problem with
the perms).

Michael
-- 
-------------------------------------------------------------------
Michael Bell                   Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter     Email:  [EMAIL PROTECTED]
Humboldt-University of Berlin  Tel.: +49 (0)30-2093 2482
Unter den Linden 6             Fax:  +49 (0)30-2093 2959
10099 Berlin
Germany                                       http://www.openca.org

_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to