On Tue, Feb 29, 2000 at 03:42:09PM +0100, Juergen Moellenhoff wrote:
...
> --------------------------------------------------------
> SSL_connect() failed: [8827:error:24064064:random number
> generator:SSLEAY_RAND_BYTES:prng not seeded:md_rand.c:476:
> 8827:error:05067003:Diffie-Hellman routines:DH_generate_key:BN
> lib:dh_key.c:148: 8827:error:14098005:SSL
> routines:SSL3_SEND_CLIENT_KEY_EXCHANGE:bad asn1 object header:s3_clnt.c:1403]
> --------------------------------------------------------
...
> I don't know why SSL_connect() fails inside the md_rand file, I assume that
> the random number generator can't generate enough random bytes, but what is the
> difference between 0.9.4 and 0.9.5? I there a new function that I must call
> before I can use the Lib? Something that initialize the random number
> generator?
Unlike older versions, 0.9.5 checks whether the PRNG was explicitly seeded
with (random) bytes. [It won't stop you from feeding it something static,
though it would not be very clever with regard to security.]
Please check the "RAND*" manual pages included with OpenSSL 0.9.5 on
hints on how to seed the PRNG.
Hey, OpenSSL maintainers, please put a big red sticker onto the HTML-pages
or even let an extra window pop up with this hint :-)
Otherwise I already predict the major topic in the OpenSSL mailing lists
for the next days...
Best regards,
Lutz
--
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus Fax. +49 355 69-4153
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
