Re: /dev/random and chroot()

2003-03-28 Thread Andrew Sherman
You need to create the special files in your chroot jail. Andy Sherman IT Security Morgan Stanley Axel Andersson wrote: > Hey, > I'm writing an SSL daemon that for security reasons does a chroot(2) to its own > little root. When chrooted, it obviously cannot open /dev/random or /dev/urandom > wh

Re: ftp implicit ssl connection

2003-03-14 Thread Andrew Sherman
I think the question was this: why are you trying to invent another secure FTP protocol when there is already a draft IETF standard for bringing up SSL/TLS command and/or data channels in FTP, as well as several open source implementations of that draft protocol. Caveat: I am not an expert on th

no-engine broken for Linux on 0.9.7 and 0.9.7a

2003-02-26 Thread Andrew Sherman
Folks, Has anybody else seen this? I tried to build using the no-engine option: OpenSSL version: 0.9.7a Last change: In ssl3_get_record (ssl/s3_pkt.c), minimize information... Options: no-idea no-rc5 no-engine shared threads --prefix=/var/tmp/openssl no-krb5 OS (uname): Linu