Lutz Jaenicke <[EMAIL PROTECTED]>:
> robert bonomi:
>> I run some systems where /etc is on (hardware-level) Read-Only media. Can't
>> create sockets there, obviously. The only writable space is under /home,
>> /var, and /tmp. Sockets and named pipes end up under /var, mostly -- a few
>> are in sub-directories under /tmp.
There's nothing really wrong about /etc -- luckily under Unix you have
symlinks, the actual socket can still live in /var/run.
[...]
> Due to the
> bad advice given on openssl-* in the past people have introduce the
> "practice" to seed the prng with a static string. To prevent that, OpenSSL
> starting with 0.9.6 will always try to query /dev/urandom to get entropy in
> any case!
I'm pretty sure that *all* versions of OpenSSL use /dev/urandom if
something can be read from there.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]