On Wed, Jul 12, 2000 at 03:43:50PM +0200, Gerd Schering wrote:
> On Wed, 12 Jul 2000, you wrote:
> >
> > Did you specify "-rand /dev/urandom" on the command line?
> > You MUST NOT do that. If you have /dev/urandom, the OpenSSL library and
> > applications will silently query it for you.
> > If you specify it on the command line, the "-rand" option tries to use
> > the whole file, which is infinitely long, as you already found out :-)
> >
> > Best regards,
> > Lutz
>
> No I did not! The command was something like the following, which exactly shows
> this behaviour:
>
> openssl genrsa -out Key.pem 1024
Hmm, I re-read your original mail. It says:
...
Of course I could use one of the workarounds found in the mail archives, but on
the other hand /dev/urandom seems to be the compiled-in default for RANDFILE
via e_os.h.
...
That is not true. It is "DEVRANDOM" that is set in e_os.h.
Did you specify RANDFILE /dev/urandom?
Best regards,
Lutz
--
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus Fax. +49 355 69-4153
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
