Re: Again !! - Failed to generate temporary 512 bit RSA private key

2000-03-14 Thread Lutz Jaenicke

On Mon, Mar 13, 2000 at 05:53:24PM -0800, Saleej T wrote:
...
 /usr/local/apache/bin/apachectl startssl:
 httpd could not be started
 
and in the ssl log file it is giving
 
 [13/Mar/2000 17:24:56 06351] [error] Init: Failed to
 generate temporary 512 bit RSA private key
 [13/Mar/2000 17:42:23 06355] [info]  Server:
 Apache/1.3.12, Interface: mod_ssl/2.6.0, Library:
 OpenSSL/0.9.5
 [13/Mar/2000 17:42:23 06355] [info]  Init: 1st startup
 round (still not detached)
 [13/Mar/2000 17:42:23 06355] [info]  Init:
 Initializing OpenSSL library
 [13/Mar/2000 17:42:23 06355] [info]  Init: Loading
 certificate  private key of SSL-aware server
 www.basheer.com:443
 [13/Mar/2000 17:42:23 06355] [info]  Init: Seeding
 PRNG with 8 bytes of entropy
 [13/Mar/2000 17:42:23 06355] [info]  Init: Generating
 temporary RSA private keys (512/1024 bits)
 [13/Mar/2000 17:42:23 06355] [error] Init: Failed to
 generate temporary 512 bit RSA private key
...

What is in the ssl_egine_log?
Did you try to feed the PRNG _explicitely_ via httpd.conf and with more
than 8 bytes? openssl-0.9.5/crypto/rand/md_rand.c:
#define ENTROPY_NEEDED 16  /* require 128 bits = 16 bytes of randomness */

Best regards,
Lutz
-- 
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus   http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik  Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus  Fax. +49 355 69-4153
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Again !! - Failed to generate temporary 512 bit RSA private key

2000-03-13 Thread Saleej T

Hello,

   I have installed Apache 1.3.12 + Mod-SSL
2.6.2-1.3.12 + OpenSSL 0.9.5 under Solaris 2.7. 
Whenever I am trying to start the web server with
"/usr/local/apache/bin/apachectl start" the normal
HTTP server runs fine.  But whenever I am starting the
HTTPS server with "/usr/local/apache/bin/apachectl
startssl" it is giving the following message.

/usr/local/apache/bin/apachectl startssl:
httpd could not be started

   and in the ssl log file it is giving

[13/Mar/2000 17:24:56 06351] [error] Init: Failed to
generate temporary 512 bit RSA private key
[13/Mar/2000 17:42:23 06355] [info]  Server:
Apache/1.3.12, Interface: mod_ssl/2.6.0, Library:
OpenSSL/0.9.5
[13/Mar/2000 17:42:23 06355] [info]  Init: 1st startup
round (still not detached)
[13/Mar/2000 17:42:23 06355] [info]  Init:
Initializing OpenSSL library
[13/Mar/2000 17:42:23 06355] [info]  Init: Loading
certificate  private key of SSL-aware server
www.basheer.com:443
[13/Mar/2000 17:42:23 06355] [info]  Init: Seeding
PRNG with 8 bytes of entropy
[13/Mar/2000 17:42:23 06355] [info]  Init: Generating
temporary RSA private keys (512/1024 bits)
[13/Mar/2000 17:42:23 06355] [error] Init: Failed to
generate temporary 512 bit RSA private key

   I kept the $HOME/.rnd file by "touch
$HOME/.rnd" and tried to give make certificate again. 
But the result is same.  Instead of just creating the
".rnd" file I copied the files like 

..openssl-0.9.5/ms/.rnd
..openssl-0.9.5/test/.rnd 

   to $HOME.  But still the effect is same.
   What's wrong?  Could anybody help me?

Regards,
Saleej.

__
Do You Yahoo!?
Talk to your friends online with Yahoo! Messenger.
http://im.yahoo.com
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]