I ran into
this on a solaris 2.6 system it is caused by solaris not including a
/dev/random and /dev/urandom random number generator. There is a
solaris patch called sunsit (i think) that you can download from sunsolve
or you can install an open source random number generator (there are some links
on the openssl faq page.) We created a pipe to a custome c program we wrote to
generate the random numbers for openssl.
Hope
this helps ,
David
Hello,
We are using OpenSSL version 0.9.5a for a project and have noticed some
errors connecting to any of our HTTPS:// sites with IE4.0. We can use
the same machine with the same version browser and connect to several other
https: sites. One thought was what version of SSL is being sent to the
browser? IE4.0 only adapts to SSL3. Another possibility is that we
are not a CA yet, we are using a temporary key that was generated a few days
ago.
Looking at the ssl_log I
see:
tail -f
ssl_log [26/Oct/2000:15:11:54 -0400] - - - [26/Oct/2000:15:11:55 -0400]
- - - [26/Oct/2000:15:11:55 -0400] - - - [26/Oct/2000:15:11:55 -0400] -
- - [26/Oct/2000:15:11:55 -0400] - - - [26/Oct/2000:15:11:55 -0400] - -
- [26/Oct/2000:15:11:55 -0400] - - - [26/Oct/2000:15:11:55 -0400] - -
- [26/Oct/2000:15:12:17 -0400] SSL3 EXP1024-RC4-SHA -
and within the Apache error_log I
see:
24064064:random number
generator:SSLEAY_RAND_BYTES:PRNG not seeded
I read your documentation regarding
this error, but could not find any work arounds?
I hope this helps, thanks in
advance for any assistance.
Regards,
Randall Ward
|