Re: Problems with SSL

[kunkee@neosoft.com (Randy Kunkee)]

Go to www.openldap.org and do a search for PRNG.  You'll find numerous
articles which discuss PRNG.  It stands for Pseudo Random Number Generator
and is needed by the OpenSSL software.  You can also generate a .rnd file
with the 'openssl' command to substitute for this.  This is not the most
secure solution, but will suffice for testing.

> Hello,
> 
>     I've configured slapd with  a TSLCertificateFile and a
> TSLCertificateKeyFile, but when I try to run ldapsearch via a command line
> argument I get this error:
> ldap_bind: Can't contact LDAP server
>     additional info: error:24064064:random number
> generator:SSLEAY_RAND_BYTES:PRNG not seeded
> 
> should I put in the slapd.conf a TSLCACertificateFile? Or should I run a
> program (what?) to generate a random number?
> 
>     Thanks a lot
> 
>     Roc_o Walias
> 
>