[Exim] exim & TLS (openssl & egd)

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Dave Robbins
Date:  
À: exim-users
Sujet: [Exim] exim & TLS (openssl & egd)
I am converting from sendmail 8.9.3 to exim 3.36.
I have installed on Solaris 7:
OpenSSL 0.9.6b
egd-0.8

egd starts up okay:

   # cd /etc/init.d
   # ./egd start
   22 sources found
   forking into background...
   server starting
   # ls -AFog /dev/random
   srwxr-xr-x   1       0 Jan 10 19:29 /dev/random=


When I cd to /usr/local/ssl/bin and run:

# /usr/local/ssl/bin/openssl req -x509 -newkey rsa:1024 -keyout privkey.pem -out cert.csr -days 9999 -nodes

The result is:

Using configuration from /usr/local/ssl/openssl.cnf
unable to load 'random state'
This means that the random number generator has not been seeded
with much random data.
Generating a 1024 bit RSA private key
13749:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not
seeded:md_rand.c:492:You need to read the OpenSSL FAQ,
http://www.openssl.org/support/faq.html
13749:error:04069003:rsa routines:RSA_generate_key:BN lib:rsa_gen.c:182:

I looked at the EGD README. It claims one needs to configure egd
for OpenSSL with:

cd /opt/openssl-0.9.6b
./configure --with-egd-pool=/etc/entropy

There is no ./configure -- however, openssl has a ./config and ./Configure

./Configure --with-egd-pool=/etc/entropy
Usage: Configure [no-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx]
[rsaref] [no-threads] [no-asm] [no-dso] [386] [--prefix=DIR]
[--openssldir=OPENSSLDIR] os/compiler[:flags]

./config --with-egd-pool=/etc/entropy
Operating system: sun4u-whatever-solaris2
Configuring for solaris-sparcv9-gcc
Usage: Configure [no-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx]
[rsaref] [no-threads] [no-asm] [no-dso] [386] [--prefix=DIR]
[--openssldir=OPENSSLDIR] os/compiler[:flags]

When I grep ./config and ./Configure for 'egd', it returns null.

What am I missing here?
Thanks for any help.

Dave