Hong Tian wrote: > > Owen, > > I created my own CA for signing certificate, not by a commercial CA like > Verisign. Now I try to make certificate again by "openssl" command on > Solaris > and still have PRNG problem: > > # openssl genrsa 0des3 -out ca.ket 1024 > ...PRNG not seeded...
1) Make a random data file and set it up as $RANDFILE # cd /usr/local/apache/ssl/certs # PATH=$PATH:/usr/local/apache/bin # export PATH # cp /var/cron/olog temp # gzip temp # mv temp.gz random_data # RANDFILE=/usr/local/apache/ssl/certs/random_data # export RANDFILE ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
