[Pkg-openssl-devel] Bug#898470: openssl says "Can't load /root/.rnd into RNG"

[Sander Jonkers]

On Mon, May 14, 2018 at 11:45 PM, Sebastian Andrzej Siewior <
sebastian at breakpoint.cc> wrote:

>
> It does say error, but everything completes as expected, correct?
>

Yes, correct: the cert file is created, despite the error message.


FWIW: with the older openssl 1.1.0  "libssl1.1:amd64 (1.1.0h-2)", there is
no error message with the cert-gen command; the file /root/.rnd is there
after the first openssl key-gen command

root at 0e7025a0d9cc:/# openssl version
OpenSSL 1.1.0h  27 Mar 2018


root at 0e7025a0d9cc:/# ls -al /root/.rnd
ls: cannot access '/root/.rnd': No such file or directory

root at 0e7025a0d9cc:/# openssl genrsa -out example.com.key 2048
Generating RSA private key, 2048 bit long modulus
...............................+++
.....................+++
e is 65537 (0x010001)

root at 0e7025a0d9cc:/# ls -al /root/.rnd
-rw------- 1 root root 1024 May 15 05:47 /root/.rnd

root at 0e7025a0d9cc:/# openssl req -new -x509 -key example.com.key -out
example.com.cert -days 3650 -subj /CN=example.com
root at 0e7025a0d9cc:/#
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-openssl-devel/attachments/20180515/910adb6e/attachment.html>