make .rnd file at current directory. $ netstat -a > .rnd
----- Original Message ----- From: "Justin Georgeson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, July 30, 2002 2:53 AM Subject: problem generating certficate > Nobody responded the first time, so I'm asking again. I can easily > generate the certificate on another machine, but the people I'm helping > aren't sure which other machines have openssl available, and I'd like to > have them go through the motions themselves. I have Solaris 8, OpenSSL > 0.9.6c, egd 0.8, and prngd 0.9.25. Prngd is running. I believe all three > are from the sunfreeware packages. Prngd and egd were setup as described > in the sunfreeware howto for using the openssh 3.1 package. Any > suggestions? > > I looked at the FAQ and it looked conflicting to me. It says to contact > the author of the app (the app is the openssl command line tools in this > case). Then it talks about using $RANDFILE for command line tools. Then > it says pointing to an egd socket doesn't work and to use -rand. Then it > says $RANDFILE only works for the command line tools. Do the command > line tools connect to the egd socket, then write to the file. If I use > -rand, do I still need $RANDFILE. Or is -rand to make the toole use egd? > I'm confused. > > [root@-?] /usr/local/bin > # openssl req -x509 -days 365 -new -newkey rsa:1024 -keyout privkey.pem > -out cert.pem > Using configuration from /usr/local/ssl/openssl.cnf > unable to load 'random state' > This means that the random number generator has not been seeded > with much random data. > Generating a 1024 bit RSA private key > 23990:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not > seeded:md_rand.c:501:You need to read the OpenSSL FAQ, > http://www.openssl.org/support/faq.html > 23990:error:04069003:rsa routines:RSA_generate_key:BN lib:rsa_gen.c:182: > > [root@-?] /usr/local/bin > # > > -- > Justin Georgeson > UnBound Technologies, Inc. > http://www.unboundtech.com > Main 713.329.9330 > Fax 713.460.4051 > Mobile 512.789.1962 > > 5295 Hollister Road > Houston, TX 77040 > Real Applications using Real Wireless Intelligence(tm) > > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
