EvilRob.org -> Unix -> Ntpdate with big offsets

Apache 2.0 mod_ssl PRNG seeding

After building apache 2.0 with mod_ssl support on Solaris, I tried to test start the server to make sure it worked before building the certificates. Got this error on startup:

[Fri Jan 02 10:18:39 2004] [warn] Init: PRNG still contains insufficient entropy!
[Fri Jan 02 10:18:39 2004] [error] Init: Failed to generate temporary 512 bit RSA private key
Configuration Failed

Took a while, but I finally figured it out. The SSLRandomSeed directive doesn't get read when you do "apachectl start", it's only included when you do a startssl. So without that directive, mod_ssl tries to read its random seed from /dev/random (which solaris doesn't have without a patch) and it blows up. Either generate certs and use startssl, or move the SSLRandomSeed directives in ssl.conf outside of the IFdefined SSL at the top of ssl.conf.

See the patch I sumbitted for more info. Of course, the patch is for the template, so if you've already got a config file you'll have to move the lines manually. The patch is now included in Apache 2.0, so hopefully you won't run into this any more.

Looking for more unix information? See my weblog for more.
©1995-2005 Rob Meyer. All Rights Reserved