Subject: Re: problem with 1.5.1_ALPHA & openssl
To: None <itojun@iijlab.net>
From: Jason R Thorpe <thorpej@zembu.com>
List: current-users
Date: 03/21/2001 13:40:04
On Thu, Mar 22, 2001 at 04:22:59AM +0900, itojun@iijlab.net wrote:

 > 	it looks that "openssl genrsa" chews extremely high amount of
 > 	pseudo random numbers from /dev/urandom.  i'm still not sure about why.

The problem is it treats /dev/urandom as a regular files that has an EOF; it
requests to read "the whole file".  Obviously, that doens't work so well for
a bottomless pit.

/dev/urandom needs to be treated more like the "EGD" socket in OpenSSL.

-- 
        -- Jason R. Thorpe <thorpej@zembu.com>