While working on the "reproducible builds" effort , we have noticed
that pound could not be built reproducibly.
During build "openssl dhparam" is used to generate C header files containing
DH parameters, which are not reproducible.
Those are always randomly generated. Even when seeded with "-rand /filename",
openssl reads from /dev/urandom to generate them.
I'm not sure what the best solution would be to make it reproducible.
Perhaps the header files can be pre-generated and included in the source
Reproducible-builds mailing list