Hi there,

On Thu, 14 Dec 2000, [iso-8859-1] dilip kumar wrote:

[snip]

> i am running a daeomon using stunnel version 3.8p4
> ,but give the following output with some in generating
> random numbers 

[snip]

> i also tried to generate random number file with open
> ssl with rand command . this command gives error like
> this

perhaps you should look carefully at the error output;

> OpenSSL> rand -out RANDFILE 23
> unable to load 'random state'
> This means that the random number generator has not
> been seeded
> with much random data.
> Consider setting the RANDFILE environment variable to
> point at a file that
> 'random' data can be kept in (the file will be
> overwritten).
> 13836:error:24064064:random number
> generator:SSLEAY_RAND_BYTES:PRNG not seeded:m
> d_rand.c:474:You need to read the OpenSSL FAQ,
> http://www.openssl.org/support/fa
> q.html
> error in rand

You need to read the OpenSSL FAQ, http://www.openssl.org/support/faq.html

> and here follows the output of stunnel command .please
> help me .its very urgent.

again, you should read your own error output;

[snip]

> LOG5[13670:1]: Using '203.111.24.54.4053' as
> tcpwrapper service name
> LOG4[13670:1]: Wrong permissions on
> /usr/local/ssl/certs/gjones@mintech[1].com.s
> g.pem

Off the main subject - stunnel doesn't like the permissions on that file,
but then;

> LOG6[13670:1]: Unable to retrieve any random data from
> /tmp/entropy
> LOG4[13670:1]: Failed to write strong random data to
> /tmp/entropy.  May be a per
> missions or seeding problem
> LOG6[13670:1]: PRNG seeded with 0 bytes total
> LOG4[13670:1]: PRNG may not have been seeded with
> enough random bytes

[snip]

If you read that FAQ, you may get a clue as to what all that means. Beyond
that FAQ entry, anything like this becomes an application problem (ie.
stunnel, not openssl). Also, this belongs on openssl-users, not
openssl-dev.

Cheers,
Geoff


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to