I installed apache 2.2 with mod_ssl today on a local computer for
development purposes and decided to have a peek at the logs just for
fun. When I saw "Seeding PRNG with 0 bytes of entropy" I was amused
and at the same time somewhat frightened.
My apache config can be found here: http://rafb.net/paste/results/
y35vW136.html and what follows below are the relevant log entries for
a single fetch of "http://localhost/"; via Safari.
There's no imminent danger since this is just a local dev box but I
would like to get to the bottom of this 0 PRNG seed weirdness anyway;
just blame human curiosity.
(Note: The offending log entry is on the 2nd line of error_log)
==access_log==
::1 - - [14/Sep/2006:12:52:11 -0400] "GET / HTTP/1.1" 200 209 "-"
"Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/418.8
(KHTML, like Gecko) Safari/419.3" 569 1359
::1 - - [14/Sep/2006:12:52:11 -0400] "GET /favicon.ico HTTP/1.1" 200
- "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/418.8
(KHTML, like Gecko) Safari/419.3" 320 362
==error_log==
[Thu Sep 14 12:52:11 2006] [info] [client ::1] Connection to child 5
established (server localhost:443)
[Thu Sep 14 12:52:11 2006] [info] Seeding PRNG with 0 bytes of entropy
[Thu Sep 14 12:52:11 2006] [info] Client requested a 'session-resume'
but we have no such session.
[Thu Sep 14 12:52:11 2006] [info] Initial (No.1) HTTPS request
received for child 5 (server localhost:443)
[Thu Sep 14 12:52:11 2006] [info] Subsequent (No.2) HTTPS request
received for child 5 (server localhost:443)
[Thu Sep 14 12:52:16 2006] [info] [client ::1] (70007)The timeout
specified has expired: SSL input filter read failed.
[Thu Sep 14 12:52:16 2006] [info] [client ::1] Connection closed to
child 5 with standard shutdown (server localhost:443)
==ssl_log==
[14/Sep/2006:12:52:11 -0400] ::1 TLSv1 RC4-SHA "GET / HTTP/1.1" 209
[14/Sep/2006:12:52:11 -0400] ::1 TLSv1 RC4-SHA "GET /favicon.ico HTTP/
1.1" -
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
" from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
