Irix: PRNG initialization failed
Pekka Savola
pekkas at netcore.fi
Thu Sep 28 20:39:08 EST 2000
Hello all,
In response to this and other suggestions;
Uncommenting DEBUG_ENTROPY #define in entropy.c didn't help at all; no
extra messages were shown.
I also tweaked ssh_prng file in /etc, and and upped the values by changing
0.0X to 0.X. No effect. I also tried uncommenting netstat lines, also no
effect.
The PRNG initialization error happens right in the beginning of 'ssh -v',
'ssh-keygen' etc. -- no other output is generated.
Any other suggestions?
I guess I must debug entropy.c by hand next.
Regards,
Pekka
On Thu, 28 Sep 2000, Damien Miller wrote:
> On Thu, 28 Sep 2000, Pekka Savola wrote:
>
> > Hello all,
> >
> > I tried OpenSSH versions 2.1.1p4, 2.2.0p1 and the latest snapshot briefly
> > on 64-bit Irix 6.5.7f an 6.5.9m.
> >
> > Both times, no matter what I do, I'll get 'PRNG initialization failed
> > -- exiting'. This happens with ssh-keygen (the keys aren't even generated
> > yet, ssh binary etc.)
> >
> > It's clear that Irix etc. don't have a proper entropy pool like *BSD and
> > Linux do, but shouldn't this be at least usable?
> >
> > FWIW, consigure shows for entropy source: Builtin (timeout 200).
> >
> > I read a mention or two about entropy daemons and such, but I'm not sure
> > if those should be a must to get this to run..
>
> Portable OpenSSH tries to collect randomness by running commands and
> stirring their output into OpenSSL's random pool. If enough commands
> fail, or not data is read from said commands then you will fail with
> the above error message.
>
> You may want to adjust the commands in the ssh_prng_cmds to suit your
> system. If you have any favourites, please send them to me for
> inclusion.
>
> Alternately you can debug the execution of the commands by defining
> the DEBUG_ENTROPY flag in entropy.c
>
> -d
>
>
>
--
Pekka Savola "Tell me of difficulties surmounted,
Pekka.Savola at netcore.fi not those you stumble over and fall"
More information about the openssh-unix-dev
mailing list