I ran into this on a solaris 2.6 system it is caused by solaris not including a /dev/random   and /dev/urandom random number generator. There is a solaris patch called sunsit (i think) that you can download from sunsolve or you can install an open source random number generator (there are some links on the openssl faq page.) We created a pipe to a custome c program we wrote to generate the random numbers for openssl.
 
Hope this helps ,
David
-----Original Message-----
From: Randall [mailto:[EMAIL PROTECTED]]
Sent: Thursday, October 26, 2000 2:29 PM
To: [EMAIL PROTECTED]
Subject: Re: HTTPS: errors

Hello,
 
We are using OpenSSL version 0.9.5a for a project and have noticed some errors connecting to any of our HTTPS:// sites with IE4.0.  We can use the same machine with the same version browser and connect to several other https: sites.  One thought was what version of SSL is being sent to the browser?  IE4.0 only adapts to SSL3.  Another possibility is that we are not a CA yet, we are using a temporary key that was generated a few days ago. 
 
Looking at the ssl_log I see:
tail -f ssl_log
[26/Oct/2000:15:11:54 -0400] - - -
[26/Oct/2000:15:11:55 -0400] - - -
[26/Oct/2000:15:11:55 -0400] - - -
[26/Oct/2000:15:11:55 -0400] - - -
[26/Oct/2000:15:11:55 -0400] - - -
[26/Oct/2000:15:11:55 -0400] - - -
[26/Oct/2000:15:11:55 -0400] - - -
[26/Oct/2000:15:11:55 -0400] - - -
[26/Oct/2000:15:12:17 -0400] SSL3 EXP1024-RC4-SHA -
 
and within the Apache error_log I see:
24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not seeded
 
I read your documentation regarding this error, but could not find any work arounds?
 
I hope this helps, thanks in advance for any assistance.
 
Regards,
Randall Ward
 

Reply via email to