Commit 78a0aebb authored by Richard Levitte's avatar Richard Levitte
Browse files

Recent changes from 0.9.6-stable.

parent 14f4feb0

FAQ

+2 −0
Original line number Original line Diff line number Diff line
@@ -223,6 +223,8 @@ support can be found at 
  http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsrdb/27606&zone_32=SUNWski

  http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsrdb/27606&zone_32=SUNWski

However, be warned that /dev/random is usually a blocking device, which

However, be warned that /dev/random is usually a blocking device, which

may have some effects on OpenSSL.

may have some effects on OpenSSL.

A third party /dev/random solution for Solaris is available at

  http://www.cosy.sbg.ac.at/~andi/









* Why do I get an "unable to write 'random state'" error message?

* Why do I get an "unable to write 'random state'" error message?

INSTALL

+12 −0
Original line number Original line Diff line number Diff line
@@ -288,3 +288,15 @@ 
 targets for shared library creation, like linux-shared.  Those targets

 targets for shared library creation, like linux-shared.  Those targets

 can currently be used on their own just as well, but this is expected

 can currently be used on their own just as well, but this is expected

 to change in future versions of OpenSSL.

 to change in future versions of OpenSSL.



 Note on random number generation

 --------------------------------



 Availability of cryptographically secure random numbers is required for

 secret key generation. OpenSSL provides several options to seed the

 internal PRNG. If not properly seeded, the internal PRNG will refuse

 to deliver random bytes and a "PRNG not seeded error" will occur.

 On systems without /dev/urandom (or similar) device, it may be necessary

 to install additional support software to obtain random seed.

 Please check out the manual pages for RAND_add(), RAND_bytes(), RAND_egd(),

 and the FAQ for more information.

Makefile.org

+3 −0
Original line number Original line Diff line number Diff line
@@ -608,6 +608,9 @@ update: depend errors stacks util/libeay.num util/ssleay.num crypto/objects/obj_ 
# and read directly, requiring GNU-Tar. Call "make TAR=gtar dist" if the normal

# and read directly, requiring GNU-Tar. Call "make TAR=gtar dist" if the normal

# tar does not support the --files-from option.

# tar does not support the --files-from option.

tar:

tar:

	find . -type d -print | xargs chmod 755

	find . -type f -print | xargs chmod a+r

	find . -type f -perm -0100 -print | xargs chmod a+x

	find * \! -path CVS/\* \! -path \*/CVS/\* \! -name CVS \! -name .cvsignore \! -name STATUS \! -name TABLE | sort > ../$(TARFILE).list; \

	find * \! -path CVS/\* \! -path \*/CVS/\* \! -name CVS \! -name .cvsignore \! -name STATUS \! -name TABLE | sort > ../$(TARFILE).list; \

	$(TAR) $(TARFLAGS) --files-from ../$(TARFILE).list -cvf - | \

	$(TAR) $(TARFLAGS) --files-from ../$(TARFILE).list -cvf - | \

	tardy --user_number=0  --user_name=openssl \

	tardy --user_number=0  --user_name=openssl \

apps/req.c

+1 −1
Original line number Original line Diff line number Diff line
@@ -431,7 +431,7 @@ bad: 




	if (template != NULL)

	if (template != NULL)

		{

		{

		long errline;

		long errline = -1;





		BIO_printf(bio_err,"Using configuration from %s\n",template);

		BIO_printf(bio_err,"Using configuration from %s\n",template);

		req_conf=CONF_load(NULL,template,&errline);

		req_conf=CONF_load(NULL,template,&errline);

apps/x509.c

+1 −1
Original line number Original line Diff line number Diff line
@@ -474,7 +474,7 @@ bad: 




	if (extfile)

	if (extfile)

		{

		{

		long errorline;

		long errorline = -1;

		X509V3_CTX ctx2;

		X509V3_CTX ctx2;

		if (!(extconf=CONF_load(NULL,extfile,&errorline)))

		if (!(extconf=CONF_load(NULL,extfile,&errorline)))

			{

			{