Re: [openssl-users] using a random number file for generation of keys/certificates

2015-09-03 Thread Kevin Long
Can I not use the file directly, as to not rely whatsoever on the OS’s PRNG ? > On Sep 3, 2015, at 11:23 AM, Viktor Dukhovni > wrote: > > On Wed, Sep 02, 2015 at 09:53:05PM -0700, Kevin Long wrote: > >> I've been asked to use a hardware random number gener

Re: [openssl-users] using a random number file for generation of keys/certificates

2015-09-03 Thread Kevin Long
ch are encased in epoxy ... you > have no way to verify that they're doing what they say they are. The data > quality coming out of those is fairly suspect in my mind (despite any > positive results from e.g. dieharder, etc). > > On Wed, Sep 2, 2015 at 9:53 PM, Kevin Long

[openssl-users] using a random number file for generation of keys/certificates

2015-09-02 Thread Kevin Long
Hello, I’m using openssl to administer a root/intermediate CA and I use the certificates for a number of web servers and other applications. All of my users install my root CA certificate for trust. I’ve been asked to use a hardware random number generator to create the keys/certificates go