bugzilla-daemon at mindrot.org
2002-Sep-17 15:02 UTC
[Bug 398] OpenSSL build mech. doesn't acknowledge /dev/random in Solaris
http://bugzilla.mindrot.org/show_bug.cgi?id=398 mouring at eviladmin.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID ------- Additional Comments From mouring at eviladmin.org 2002-09-18 01:02 ------- Please recompile OpenSSL to understand where your /dev/random device is. ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon at mindrot.org
2002-Sep-17 15:23 UTC
[Bug 398] OpenSSL build mech. doesn't acknowledge /dev/random in Solaris
http://bugzilla.mindrot.org/show_bug.cgi?id=398 ------- Additional Comments From dtucker at zip.com.au 2002-09-18 01:23 ------- When configure says "Random number source: OpenSSL internal ONLY" it means that it's using /dev/urandom. "Random number source: ssh-rand-helper" is the external entropy collector. Regardless, the openssl libraries will use /dev/urandom if it exists. (You may need to recompile openssl, but I don't think so). From openssl's e_os.h (typo and all :-) : #ifndef DEVRANDOM /* set this to your 'random' device if you have one. * My default, we will try to read this file */ #define DEVRANDOM "/dev/urandom" #endif For maximum portability, when building packages I use "./configure --with-rand-helper". That way /dev/urandom will be used if it exists, but if it doesn't then the random helper will be used. This lets us use the same binaries on machines with and without the /dev/random patch. ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.