The key might be the following: ... SSLEAY_RAND_BYTES:PRNG not >seeded:md_ >rand.c:474: ... EGD didn't provide enough entropy for my HPUX box. There is a program called PRNG out there somewhere. Solaris and HP don't have a built in random number generator like Linux. If you run EGD for a while before generating the key you may get your certificate; but, then you may not be able to get enough randomness to run your application. That was where I had problems. -----Original Message----- From: Kerry Chin <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] <[EMAIL PROTECTED]> Date: Tuesday, December 12, 2000 3:53 PM Subject: Random State problem >Could someone please help me? I'm new at this so please forgive me for >my ignorance. I'm trying to install SSL on a Solaris 7 box. I've >installed everything, but when I run "make certificate" I get the >following: > >Apache# make certificate >ps > /tmp/ssl-rand; date >> /tmp/ssl-rand; \ >RANDFILE=/tmp/ssl-rand /usr/local/ssl/bin/openssl req -config >../SSLconf/conf/ss >leay.cnf \ >-new -x509 -nodes -out ../SSLconf/conf/httpsd.pem \ >-keyout ../SSLconf/conf/httpsd.pem; \ >ln -sf httpsd.pem ../SSLconf/conf/`/usr/local/ssl/bin/openssl \ >x509 -noout -hash < ../SSLconf/conf/httpsd.pem`.0; \ >rm /tmp/ssl-rand >Using configuration from ../SSLconf/conf/ssleay.cnf >unable to load 'random state' >This means that the random number generator has not been seeded >with much random data. >Generating a 1024 bit RSA private key >478:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not >seeded:md_ >rand.c:474:You need to read the OpenSSL FAQ, >http://www.openssl.org/support/faq. >html >478:error:04069003:rsa routines:RSA_generate_key:BN lib:rsa_gen.c:182: >*** Error code 1 >make: Fatal error: Command failed for target `certificate' > >Any help will be greatly appreciated. Thanks > >______________________________________________________________________ >OpenSSL Project http://www.openssl.org >User Support Mailing List [EMAIL PROTECTED] >Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
