Hi All,

Here is something I am not able to figure out, even after checking the FAQ and 
the rand(3) man page:

When using the openssl command line utility, is a private RANDFILE per CA 
required for security reasons, or is it just fine to use a single RANDFILE for 
everything (i.e. the default ~/.rnd)? Older configuration files seem to 
indicate the former, but is this still true?

IOW, I am looking for an answer to whether not having its own RANDFILE degrades 
the security of a CA.

Thank you,
Stefan

-- 
Stefan H. Holek
ste...@epy.co.at

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to