Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
OpenSSL pseudorandom number generator issue w/bind
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
guid0
Guru
Guru


Joined: 06 Jul 2003
Posts: 332
Location: The Netherlands / Nederland

PostPosted: Mon May 13, 2019 2:47 pm    Post subject: OpenSSL pseudorandom number generator issue w/bind Reply with quote

[Moderator note: this post, and only this post, was posted as a Me-Too to the solved topic OpenSSL pseudorandom number generator issue w/bind [SOLVED]. Although the error messages match, the poster of this thread tried the solution there and it did not work, so it is not actually the same issue. Hence, moving it to a separate and unsolved thread so it can get the attention it needs. -Hu]

Just happened to run into the same issue here.

However simply creating an urandom device node in my chroot did not do the job.

Code:
May 13 16:35:09 ns1 named[2368]: built with '--prefix=/usr' '--build=x86_64-pc-linux-gnu' '--host=x86_64-pc-linux-gnu' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--datadir=/usr/share' '--sysconfdir=/etc' '--localstatedir=/var/lib' '--docdir=/usr/share/doc/bind-9.12.3_p4' '--htmldir=/usr/share/doc/bind-9.12.3_p4/html' '--with-sysroot=/' '--libdir=/usr/lib64' '--sysconfdir=/etc/bind' '--localstatedir=/var' '--with-libtool' '--enable-full-report' '--without-readline' '--enable-linux-caps' '--disable-dnsrps' '--disable-dnstap' '--disable-fixed-rrset' '--enable-ipv6' '--disable-rpz-nsdname' '--disable-rpz-nsip' '--disable-seccomp' '--enable-threads' '--without-dlz-bdb' '--without-dlopen' '--without-dlz-filesystem' '--without-dlz-stub' '--without-gost' '--without-gssapi' '--without-libjson' '--without-dlz-ldap' '--without-dlz-mysql' '--without-dlz-odbc' '--without-dlz-postgres' '--without-lmdb' '--without-python' '--with-ecdsa' '--with-openssl=/usr' '--without-libxml2' '--with-zlib' '--with-randomdev=



The last bit of that compile instruction appears to be a bit odd. As if bind is compiled against a void random-dev..

So I recompiled bind with the urandom USE-flag *and* created the urandom device node in my chroot.

However to no avail..

* Starting chrooted named ...
* Mounting chroot dirs
* Checking named configuration ... [ ok ]
* start-stop-daemon: failed to start `/usr/sbin/named' [ !! ]
* ERROR: named failed to start


and from the logs:

Code:
May 13 16:43:24 ns1 named[844]: built with '--prefix=/usr' '--build=x86_64-pc-linux-gnu' '--host=x86_64-pc-linux-gnu' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--datadir=/usr/share' '--sysconfdir=/etc' '--localstatedir=/var/lib' '--docdir=/usr/share/doc/bind-9.12.3_p4' '--htmldir=/usr/share/doc/bind-9.12.3_p4/html' '--with-sysroot=/' '--libdir=/usr/lib64' '--sysconfdir=/etc/bind' '--localstatedir=/var' '--with-libtool' '--enable-full-report' '--without-readline' '--enable-linux-caps' '--disable-dnsrps' '--disable-dnstap' '--disable-fixed-rrset' '--enable-ipv6' '--disable-rpz-nsdname' '--disable-rpz-nsip' '--disable-seccomp' '--enable-threads' '--without-dlz-bdb' '--without-dlopen' '--without-dlz-filesystem' '--without-dlz-stub' '--without-gost' '--without-gssapi' '--without-libjson' '--without-dlz-ldap' '--without-dlz-mysql' '--without-dlz-odbc' '--without-dlz-postgres' '--without-lmdb' '--without-python' '--with-ecdsa' '--with-openssl=/usr' '--without-libxml2' '--with-zlib' '--with-randomdev=/


The built reference did change to "--with-randomdev=/" but im still getting:

Quote:
May 13 16:43:24 ns1 named[844]: openssl_link.c:296: fatal error:
May 13 16:43:24 ns1 named[844]: OpenSSL pseudorandom number generator cannot be initialized (see the `PRNG not seeded' message in the OpenSSL FAQ)
May 13 16:43:24 ns1 named[844]: exiting (due to fatal error in library)


I guess I have to revert to an older version of bind for now. :?

- guid0
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum