On Wed, Jun 21, 2000 at 01:40:56PM -0700, Scott Pasnikowski wrote:
> But the "req" command that seems to be used to create a self
> signed cert does not have this (-rand) param.
>
> Did I miss something somewhere? The openssl.cnf file has the
> entry for the random file, however changing it does not solve
> the issue.
>
> I am using this on the command line:
>
> "openssl req -new -x509 -key key.pem -out cert.pem -config openssl.cnf"
Since req is missing the "-rand" option, you should generate the key
seperately with genrsa or gendsa first (they have the -rand option)
and then call req with the key already generated (without -new).
Probably it would be practical to add the "-rand" option to "req".
Best regards,
Lutz
--
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus Fax. +49 355 69-4153
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
