On 08/23/2012 12:50 AM, Dr. Stephen Henson wrote:
On Wed, Aug 22, 2012, Ralf Horstmann wrote:
So the init code doesn't get enough bytes from /dev/random,
which then later triggers the bug.

The patch below fixes the issue. Creating /dev/urandom within the
chroot helps as well.


Since changing the fips module is not easy an alternative is to change the FIPS
capable OpenSSL. Try this patch:

http://cvs.openssl.org/chngview?cn=22772

That patch fixes the bug for me.

Thanks,
Ralf
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to