getting OpenSSH/OpenSSL to utilize /dev/random

[Ed Phillips]

Yes... if you literally want OpenSSL to use "/dev/random" you'd need to a
change like this.  The use of /dev/[u]random is not really "configurable"
in OpenSSL - it always tries at run-time if you compiled it for a Unix
system.

	Ed

On Thu, 11 Apr 2002, Jeremy Mates wrote:

> Date: Thu, 11 Apr 2002 07:31:27 -0700
> From: Jeremy Mates <jmates at sial.org>
> To: "'openssh-unix-dev at mindrot.org'" <openssh-unix-dev at mindrot.org>
> Subject: Re: getting OpenSSH/OpenSSL to utilize /dev/random
>
> * Lacoss-Arnold, Jason <Jason.Lacoss-Arnold at AGEDWARDS.com> [2002-04-11T07:17-0700]:
> > What gives?  What do I have to do to get openssh or openssl to see my
> > /dev/random?
>
> OpenSSL looks for /dev/urandom by default, and might be missing the
> /dev/random device ANDIrand installs:
>
> *** e_os.h.orig	Thu Nov  8 06:36:49 2001
> --- e_os.h	Thu Apr 11 07:29:43 2002
> ***************
> *** 79,85 ****
>   #ifndef DEVRANDOM
>   /* set this to your 'random' device if you have one.
>    * My default, we will try to read this file */
> ! #define DEVRANDOM "/dev/urandom"
>   #endif
>
>   #if defined(__MWERKS__) && defined(macintosh)
> --- 79,85 ----
>   #ifndef DEVRANDOM
>   /* set this to your 'random' device if you have one.
>    * My default, we will try to read this file */
> ! #define DEVRANDOM "/dev/random"
>   #endif
>
>   #if defined(__MWERKS__) && defined(macintosh)
>
>
> > WARNING:  All e-mail sent to and from this address will be received or
> > otherwise recorded by the A.G. Edwards corporate e-mail system and is
> > subject to archival, monitoring or review by, and/or disclosure to,
> > someone other than the recipient.
>
> /me waves at the nice lawyers
>
> --
> Jeremy Mates                                        http://www.sial.org/
>
> OpenPGP: 0x11C3D628  (4357 1D47 FF78 24BB 0FBF 7AA8 A846 9F86 11C3 D628)
> _______________________________________________
> openssh-unix-dev at mindrot.org mailing list
> http://www.mindrot.org/mailman/listinfo/openssh-unix-dev
>

Ed Phillips <ed at udel.edu> University of Delaware (302) 831-6082
Systems Programmer III, Network and Systems Services
finger -l ed at polycut.nss.udel.edu for PGP public key