generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Recent changes from 0.9.6-stable.

Browse Source
This commit is contained in:
Richard Levitte
2002-11-13 12:47:23 +00:00
parent 14f4feb05b
commit 78a0aebbd8
6 changed files with 20 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
FAQ
View File

@@ -223,6 +223,8 @@ support can be found at
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsrdb/27606&zone_32=SUNWski http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsrdb/27606&zone_32=SUNWski
However, be warned that /dev/random is usually a blocking device, which However, be warned that /dev/random is usually a blocking device, which
may have some effects on OpenSSL. may have some effects on OpenSSL.
A third party /dev/random solution for Solaris is available at
http://www.cosy.sbg.ac.at/~andi/
* Why do I get an "unable to write 'random state'" error message? * Why do I get an "unable to write 'random state'" error message?

12
INSTALL
View File

@@ -288,3 +288,15 @@
targets for shared library creation, like linux-shared. Those targets targets for shared library creation, like linux-shared. Those targets
can currently be used on their own just as well, but this is expected can currently be used on their own just as well, but this is expected
to change in future versions of OpenSSL. to change in future versions of OpenSSL.
Note on random number generation
--------------------------------
Availability of cryptographically secure random numbers is required for
secret key generation. OpenSSL provides several options to seed the
internal PRNG. If not properly seeded, the internal PRNG will refuse
to deliver random bytes and a "PRNG not seeded error" will occur.
On systems without /dev/urandom (or similar) device, it may be necessary
to install additional support software to obtain random seed.
Please check out the manual pages for RAND_add(), RAND_bytes(), RAND_egd(),
and the FAQ for more information.

3
Makefile.org
View File

@@ -608,6 +608,9 @@ update: depend errors stacks util/libeay.num util/ssleay.num crypto/objects/obj_
# and read directly, requiring GNU-Tar. Call "make TAR=gtar dist" if the normal # and read directly, requiring GNU-Tar. Call "make TAR=gtar dist" if the normal
# tar does not support the --files-from option. # tar does not support the --files-from option.
tar: tar:
find . -type d -print | xargs chmod 755
find . -type f -print | xargs chmod a+r
find . -type f -perm -0100 -print | xargs chmod a+x
find * \! -path CVS/\* \! -path \*/CVS/\* \! -name CVS \! -name .cvsignore \! -name STATUS \! -name TABLE | sort > ../$(TARFILE).list; \ find * \! -path CVS/\* \! -path \*/CVS/\* \! -name CVS \! -name .cvsignore \! -name STATUS \! -name TABLE | sort > ../$(TARFILE).list; \
$(TAR) $(TARFLAGS) --files-from ../$(TARFILE).list -cvf - | \ $(TAR) $(TARFLAGS) --files-from ../$(TARFILE).list -cvf - | \
tardy --user_number=0 --user_name=openssl \ tardy --user_number=0 --user_name=openssl \

2
apps/req.c
View File

@@ -431,7 +431,7 @@ bad:
if (template != NULL) if (template != NULL)
{ {
long errline; long errline = -1;
BIO_printf(bio_err,"Using configuration from %s\n",template); BIO_printf(bio_err,"Using configuration from %s\n",template);
req_conf=CONF_load(NULL,template,&errline); req_conf=CONF_load(NULL,template,&errline);

2
apps/x509.c
View File

@@ -474,7 +474,7 @@ bad:
if (extfile) if (extfile)
{ {
long errorline; long errorline = -1;
X509V3_CTX ctx2; X509V3_CTX ctx2;
if (!(extconf=CONF_load(NULL,extfile,&errorline))) if (!(extconf=CONF_load(NULL,extfile,&errorline)))
{ {

1
crypto/x509/x509_cmp.c
View File

@@ -57,6 +57,7 @@
*/ */
#include <stdio.h> #include <stdio.h>
#include <ctype.h>
#include "cryptlib.h" #include "cryptlib.h"
#include <openssl/asn1.h> #include <openssl/asn1.h>
#include <openssl/objects.h> #include <openssl/objects.h>