generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add pointer to EGD manpage.

Browse Source 
Update the "randomness" section for the upcoming 0.9.5a release.
This commit is contained in:
Ulf Möller 2000-03-28 19:45:06 +00:00
parent eff5f6124c
commit 8311d32378
1 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
FAQ
View File

@ -110,17 +110,21 @@ OpenSSL functions that need randomness report an error if the random
number generator has not been seeded with at least 128 bits of number generator has not been seeded with at least 128 bits of
randomness. If this error occurs, please contact the author of the randomness. If this error occurs, please contact the author of the
application you are using. It is likely that it never worked application you are using. It is likely that it never worked
correctly. OpenSSL 0.9.5 makes the error visible by refusing to correctly. OpenSSL 0.9.5 and later make the error visible by refusing
perform potentially insecure encryption. to perform potentially insecure encryption.
On systems without /dev/urandom, it is a good idea to use the Entropy
Gathering Demon; see the RAND_egd() manpage for details.
Most components of the openssl command line tool try to use the Most components of the openssl command line tool try to use the
file $HOME/.rnd (or $RANDFILE, if this environment variable is set) file $HOME/.rnd (or $RANDFILE, if this environment variable is set)
for seeding the PRNG. If this file does not exist or is too short, for seeding the PRNG. If this file does not exist or is too short,
the "PRNG not seeded" error message may occur. the "PRNG not seeded" error message may occur.
Note that the command "openssl rsa" in OpenSSL 0.9.5 does not do this
and will fail on systems without /dev/urandom when trying to [Note to OpenSSL 0.9.5 users: The command "openssl rsa" in version
password-encrypt an RSA key! This is a bug in the library; 0.9.5 does not do this and will fail on systems without /dev/urandom
try a later snaphost instead. when trying to password-encrypt an RSA key! This is a bug in the
library; try a later version instead.]
* Why does the linker complain about undefined symbols? * Why does the linker complain about undefined symbols?