Rocksolid Light

Welcome to RetroBBS

mail  files  register  newsreader  groups  login

Message-ID:  

There are running jobs. Why don't you go chase them?


computers / comp.sys.tandem / OpenSSL 1.1.1 on NSX

SubjectAuthor
* OpenSSL 1.1.1 on NSXPeter Collins
`- Re: OpenSSL 1.1.1 on NSXRandall

1
OpenSSL 1.1.1 on NSX

<2abbee6c-2fa0-44b3-9021-421925510798n@googlegroups.com>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=391&group=comp.sys.tandem#391

  copy link   Newsgroups: comp.sys.tandem
X-Received: by 2002:ad4:5bc1:0:b0:42c:3700:a6df with SMTP id t1-20020ad45bc1000000b0042c3700a6dfmr1011437qvt.94.1649123175166;
Mon, 04 Apr 2022 18:46:15 -0700 (PDT)
X-Received: by 2002:a05:6902:1004:b0:63d:d9fe:a754 with SMTP id
w4-20020a056902100400b0063dd9fea754mr1021761ybt.160.1649123174924; Mon, 04
Apr 2022 18:46:14 -0700 (PDT)
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!1.us.feeder.erje.net!3.us.feeder.erje.net!feeder.erje.net!border1.nntp.dca1.giganews.com!nntp.giganews.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.sys.tandem
Date: Mon, 4 Apr 2022 18:46:14 -0700 (PDT)
Injection-Info: google-groups.googlegroups.com; posting-host=103.155.36.175; posting-account=ppsK9goAAAD7eHeufsK5FINWIKc3Q1mk
NNTP-Posting-Host: 103.155.36.175
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <2abbee6c-2fa0-44b3-9021-421925510798n@googlegroups.com>
Subject: OpenSSL 1.1.1 on NSX
From: mrpc.jazzhead@gmail.com (Peter Collins)
Injection-Date: Tue, 05 Apr 2022 01:46:15 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Lines: 43
 by: Peter Collins - Tue, 5 Apr 2022 01:46 UTC

Hi All,

I've downloaded and installed this version (above) from iTuglib.

After setting the LIB location as suggested Openssl starts up ... but any operation requiring random numbers fails with entropy issues etc.:

OpenSSL> version -a
OpenSSL 1.1.1n 15 Mar 2022
built on: Wed Mar 16 02:20:50 2022 UTC
platform: nonstop-nsx
options: bn(32,32) rc4(int) des(long) idea(int) blowfish(ptr)
compiler: c99 -Wverbose -I/usr/local/include -g -O2 -Wextensions -Wnowarn=203,220,272,734,770,1506 -Wbuild_neutral_library -Wverbose -I/usr/local/include -DOPENSSL_PIC -DOPENSSL_VPROC= -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1 -DB_ENDIAN -DOPENSSL_SYSNAME_TANDEM -DOPENSSL_TANDEM_FLOSS -DNDEBUG
OPENSSLDIR: "/usr/local-ssl1.1/ssl"
ENGINESDIR: "/usr/local-ssl1.1/lib/engines-1.1"
Seeding source: EGD ( "/var/run/egd-pool" "/dev/egd-pool" "/etc/egd-pool" "/etc/entropy" )

For example:

OpenSSL> rand 10
0:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:/home/ituglib/randall/jenkins/.jenkins/workspace/OpenSSL-1.1_Pipeline/crypto/rand/drbg_lib.c:335:
0:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:/home/ituglib/randall/jenkins/.jenkins/workspace/OpenSSL-1.1_Pipeline/crypto/rand/drbg_lib.c:335:
0:error:2406B072:random number generator:RAND_DRBG_generate:in error state:/home/ituglib/randall/jenkins/.jenkins/workspace/OpenSSL-1.1_Pipeline/crypto/rand/drbg_lib.c:588:
0:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:/home/ituglib/randall/jenkins/.jenkins/workspace/OpenSSL-1.1_Pipeline/crypto/rand/drbg_lib.c:335:
etc.
Any ideas anyone?

Regards,

Peter Collins

Re: OpenSSL 1.1.1 on NSX

<290454bb-89f2-4702-989b-7799f78e3781n@googlegroups.com>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=393&group=comp.sys.tandem#393

  copy link   Newsgroups: comp.sys.tandem
X-Received: by 2002:a05:620a:1707:b0:699:a16a:5ceb with SMTP id az7-20020a05620a170700b00699a16a5cebmr3345432qkb.534.1649185964002;
Tue, 05 Apr 2022 12:12:44 -0700 (PDT)
X-Received: by 2002:a25:f54:0:b0:63d:e875:11f5 with SMTP id
81-20020a250f54000000b0063de87511f5mr3569846ybp.25.1649185963764; Tue, 05 Apr
2022 12:12:43 -0700 (PDT)
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.misty.com!border2.nntp.dca1.giganews.com!nntp.giganews.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.sys.tandem
Date: Tue, 5 Apr 2022 12:12:43 -0700 (PDT)
In-Reply-To: <2abbee6c-2fa0-44b3-9021-421925510798n@googlegroups.com>
Injection-Info: google-groups.googlegroups.com; posting-host=2607:fea8:3a9f:df76:c0c5:4d9c:f60f:33c0;
posting-account=6VebZwoAAAAgrpUtsowyjrKRLNlqxnXo
NNTP-Posting-Host: 2607:fea8:3a9f:df76:c0c5:4d9c:f60f:33c0
References: <2abbee6c-2fa0-44b3-9021-421925510798n@googlegroups.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <290454bb-89f2-4702-989b-7799f78e3781n@googlegroups.com>
Subject: Re: OpenSSL 1.1.1 on NSX
From: rsbecker@nexbridge.com (Randall)
Injection-Date: Tue, 05 Apr 2022 19:12:43 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Lines: 57
 by: Randall - Tue, 5 Apr 2022 19:12 UTC

On Monday, April 4, 2022 at 9:46:15 p.m. UTC-4, Peter Collins wrote:
> Hi All,
>
> I've downloaded and installed this version (above) from iTuglib.
>
> After setting the LIB location as suggested Openssl starts up ... but any operation requiring random numbers fails with entropy issues etc.:
>
> OpenSSL> version -a
> OpenSSL 1.1.1n 15 Mar 2022
> built on: Wed Mar 16 02:20:50 2022 UTC
> platform: nonstop-nsx
> options: bn(32,32) rc4(int) des(long) idea(int) blowfish(ptr)
> compiler: c99 -Wverbose -I/usr/local/include -g -O2 -Wextensions -Wnowarn=203,220,272,734,770,1506 -Wbuild_neutral_library -Wverbose -I/usr/local/include -DOPENSSL_PIC -DOPENSSL_VPROC= -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1 -DB_ENDIAN -DOPENSSL_SYSNAME_TANDEM -DOPENSSL_TANDEM_FLOSS -DNDEBUG
> OPENSSLDIR: "/usr/local-ssl1.1/ssl"
> ENGINESDIR: "/usr/local-ssl1.1/lib/engines-1.1"
> Seeding source: EGD ( "/var/run/egd-pool" "/dev/egd-pool" "/etc/egd-pool" "/etc/entropy" )
>
>
> For example:
>
> OpenSSL> rand 10
> 0:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:/home/ituglib/randall/jenkins/.jenkins/workspace/OpenSSL-1.1_Pipeline/crypto/rand/drbg_lib.c:335:
> 0:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:/home/ituglib/randall/jenkins/.jenkins/workspace/OpenSSL-1.1_Pipeline/crypto/rand/drbg_lib.c:335:
> 0:error:2406B072:random number generator:RAND_DRBG_generate:in error state:/home/ituglib/randall/jenkins/.jenkins/workspace/OpenSSL-1.1_Pipeline/crypto/rand/drbg_lib.c:588:
> 0:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:/home/ituglib/randall/jenkins/.jenkins/workspace/OpenSSL-1.1_Pipeline/crypto/rand/drbg_lib.c:335:
> etc.
> Any ideas anyone?
>
> Regards,
>
> Peter Collins

Please see my other response. You need to run PRNGD (from coreutils) for OpenSSL 1.x. This has not changed from prior OpenSSL releases. At OpenSSL 3.x, the x86 hardware randomizer is used, so you don't need PRNGD anymore. The command to start PRNGD is:

/usr/coreutils/sbin/prngd -f /etc/egd-pool tcp/localhost:708

Which you should make as a kernel managed process. The good thing is that PRNGD is part of CoreUtils T1202, so is supported by GNSC.

Good luck,
Randall

1
server_pubkey.txt

rocksolid light 0.9.81
clearnet tor