prngd not seeded
Kaysee Long
kaysee at us.ibm.com
Wed May 7 07:33:11 EST 2003
I am running openssh 3.4p1 and had everything working fine, but then we had
to upgrde the openssl. So did the same steps now openssh is not seeing
prngd. We configure openssh with :
--with-prngd-socket=/var/spool/prngd/pool
this is what we saw with openssl-0.9.6g when I configured it:
OpenSSH has been configured with the following options:
User binaries: /usr/local/bin
System binaries: /usr/local/sbin
Configuration files: /usr/local/etc
Askpass program: /usr/local/libexec/ssh-askpass
Manual pages: /usr/local/man/manX
PID file: /usr/local/etc
Privilege separation chroot path: /var/empty
sshd default user PATH:
/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin
Manpage format: man
PAM support: no
KerberosIV support: no
KerberosV support: no
Smartcard support: no
AFS support: no
S/KEY support: no
TCP Wrappers support: yes
MD5 password support: no
IP address in $DISPLAY hack: no
Use IPv4 by default hack: no
Translate v4 in v6 hack: no
BSD Auth support: no
Random number source: ssh-rand-helper
ssh-rand-helper collects from: Unix domain socket
"/var/spool/prngd/pool"
Host: sparc-sun-solaris2.7
Compiler: gcc
Compiler flags: -g -O2 -Wall -Wpointer-arith -Wno-uninitialized
Preprocessor flags: -I/usr/local/include -I/usr/local/include
-I/usr/local/lib -I/usr/local/include
Linker flags: -L/usr/local/lib -R/usr/local/lib -L/usr/local/lib
-R/usr/local/lib -L/usr/local/lib -R/usr/local/lib -L/usr/local/lib
-R/usr/local/lib
Libraries: -lwrap -lz -lsocket -lnsl -lcrypto
You can see the Random Number Source is ssh-rand-helper
with the new openssl-0.9.7b I get this:
OpenSSH has been configured with the following options:
User binaries: /usr/local/bin
System binaries: /usr/local/sbin
Configuration files: /usr/local/etc
Askpass program: /usr/local/libexec/ssh-askpass
Manual pages: /usr/local/man/manX
PID file: /usr/local/etc
Privilege separation chroot path: /var/empty
sshd default user PATH:
/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin
Manpage format: man
PAM support: no
KerberosIV support: no
KerberosV support: no
Smartcard support: no
AFS support: no
S/KEY support: no
TCP Wrappers support: yes
MD5 password support: no
IP address in $DISPLAY hack: no
Use IPv4 by default hack: no
Translate v4 in v6 hack: no
BSD Auth support: no
Random number source: OpenSSL internal ONLY
Host: sparc-sun-solaris2.7
Compiler: gcc
Compiler flags: -g -O2 -Wall -Wpointer-arith -Wno-uninitialized
Preprocessor flags: -I/usr/local/include -I/usr/local/include
-I/usr/local/lib
-I/usr/local/include
Linker flags: -L/usr/local/lib -R/usr/local/lib -L/usr/local/lib
-R/usr/lo
cal/lib -L/usr/local/lib -R/usr/local/lib -L/usr/local/lib
-R/usr/local/lib
Libraries: -lwrap -lz -lsocket -lnsl -lcrypto
You see the random number source is openSSL interal only
Do you know why? I use the configuration on both without changing it....
thanks Kaysee
More information about the openssh-unix-dev
mailing list