I'll answer my own question in hopes of saving someone else some time some day.

The openssl self-test is apparently quite enthusiastic about using up entropy.
Starting egd with the "--bottomless" parameter allowed the openssl make test to 
proceed to completion.
This egd feature is mentioned in its README, in the section about usage with 
GPG.

JcP

The larger the island of knowledge,
the longer the shoreline of wonder.
-- R. W. Sockman

-----Original Message-----
From: [email protected] [mailto:[email protected]] 
On Behalf Of Jeff & Lita Pratt
Sent: Friday, March 02, 2012 2:10 PM
To: [email protected]
Subject: openSSL 1.0.0g on hpux-11i

I'm a newbe with openssl, trying to get it installed so I can build 
cURL libararies.

My system does not have /dev/random, etc, so I downloaded, built, and 
installed the egd daemon.  It appears to be running:

$ ll $HOME/.rnd
-rw-------   1 jeff       lms           1024 Mar  2 12:30 
/home/jeff/.rnd

$ ll /etc/entropy
srwxrwxrwx   1 root       sys              0 Mar  2 11:05 /etc/entropy

I then ran configure, make, and make test in the openssl-1.0.0g 
directory.

The make test got a lot further this time (I'd tried it a few days ago 
before realizing I needed egd), but, alas, after awhile it emitted:

rsa
Setting up TSA test directory...
Creating CA for TSA tests...
Creating a new CA for the TSA tests...
unable to load 'random state'
This means that the random number generator has not been seeded
with much random data.
Generating a 1024 bit RSA private key
Error Generating Key
2063818456:error:24064064:random number 
generator:SSLEAY_RAND_BYTES:PRNG not see
ded:md_rand.c:522:You need to read the OpenSSL FAQ, 
http://www.openssl.org/suppo
rt/faq.html
2063818456:error:04081003:rsa routines:RSA_BUILTIN_KEYGEN:BN 
lib:rsa_gen.c:208:
TSA test failed!
*** Error exit code 1


What did I miss????

Thanks in advance...

Jeff Pratt


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [email protected]




______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [email protected]

Reply via email to