> Now I'm a little confuse about the context of RAND_* in FAQ #6.  I
> installed both EGD as well as librand but I am still getting the
> random number generator has not been seeded error.  Can someone
> explain more about how this actually works?  I did the following
> after I have successfully compile openssl 0.9.5

> % openssl s_client connect www.openssl.org:443
> 
> and I got the following error:
> 
> unable to load 'random state'
> This means that the random number generator has not been seeded 
> with much random data.
> Consider setting the RANDFILE environment variable to point at a file that
> 'random' data can be kept in (the file will be overwritten).

See the last sentence of that message.  If $RANDFILE is not set, file
$HOME/.rnd will be used for seeding the PRNG.  It will also be written
back by those sub-programs of the openssl command that understand
the -rand option -- e.g. run "openssl genrsa -rand your_egd_socket 1024"
to create $HOME/.rnd, then re-try s_client.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to