Point out the PRNG usage bug affecting openssl rsa.

(Should we point to snapshots, or directly give the one-line patch?)
This commit is contained in:
Bodo Möller 2000-03-16 16:17:00 +00:00
parent fb51beb591
commit 299e7c9145

4
FAQ
View File

@ -109,6 +109,10 @@ Most components of the openssl command line tool try to use the
file $HOME/.rnd (or $RANDFILE, if this environment variable is set)
for seeding the PRNG. If this file does not exist or is too short,
the "PRNG not seeded" error message may occur.
Note that the command "openssl rsa" in OpenSSL 0.9.5 does not do this
and will fail on systems without /dev/urandom when trying to
password-encrypt an RSA key! This is a bug in the library;
try a later snaphost instead.
* Why does the linker complain about undefined symbols?