Re: compiling openssh; need it small

From: Darren Tucker (dtucker_at_dodgy.net.au)
Date: 07/28/04


Date: Wed, 28 Jul 2004 08:43:29 +0000 (UTC)

In article <0vINc.4544$54.66884@typhoon.sonic.net>,
tanuki <ztanuki_at@at_netscape.dot.net> wrote:
>I'm recompiling openssh for use on an ia-1 internet appliance. (I have
>to disable PAM.) When running 'configure' I get this at the end of
>config output:
>
> Random number source: OpenSSL internal ONLY
>
>If I remember correctly, this should only be the case when /dev/random
>is unavailable.

No, that means OpenSSL considers itself to be self-seeded. Go ahead
and build it, it should be fine. If it's not, ssh/sshd will fail to
initialise with a "not seeded" error.

(Modern OpenSSL's will always check for /dev/[X]random device nodes
anyway, even if it wasn't present at build time.)

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.