Message-ID:

Real computer scientists like having a computer on their desk, else how could they read their mail?

computers / comp.sys.tandem / ITUGLIB Note: OpenSSL on L-series

ITUGLIB Note: OpenSSL on L-series

<4773f22e-494e-44cf-aee7-24850c0dc657n@googlegroups.com>

https://www.rocksolidbbs.com/computers/article-flat.php?id=734&group=comp.sys.tandem#734

X-Received: by 2002:a05:6214:b33:b0:656:2ff6:c592 with SMTP id w19-20020a0562140b3300b006562ff6c592mr47266qvj.8.1695248296147;
Wed, 20 Sep 2023 15:18:16 -0700 (PDT)
X-Received: by 2002:a05:6870:a8b1:b0:1d3:ce51:7814 with SMTP id
eb49-20020a056870a8b100b001d3ce517814mr1502765oab.11.1695248294469; Wed, 20
Sep 2023 15:18:14 -0700 (PDT)
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.sys.tandem
Date: Wed, 20 Sep 2023 15:18:14 -0700 (PDT)
Injection-Info: google-groups.googlegroups.com; posting-host=2607:fea8:3fa9:4200:86f:976a:4a8e:572b;
posting-account=6VebZwoAAAAgrpUtsowyjrKRLNlqxnXo
NNTP-Posting-Host: 2607:fea8:3fa9:4200:86f:976a:4a8e:572b
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <4773f22e-494e-44cf-aee7-24850c0dc657n@googlegroups.com>
Subject: ITUGLIB Note: OpenSSL on L-series
From: rsbecker@nexbridge.com (Randall)
Injection-Date: Wed, 20 Sep 2023 22:18:16 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Received-Bytes: 2264

by: Randall - Wed, 20 Sep 2023 22:18 UTC

Hi Everyone,

Just something to note: If you are on OpenSSL 3.0.10 or higher, the PRNGD server is not required on L-series. In the 3.0.10 or higher builds, the x86 hardware randomizer is successfully used even if PRNGD is running or not running. The same for 3.1.2 or higher. When 3.2 comes out, it will also support the hardware randomizer.

The advantage is that this is much faster when generating randomness, easier to configure, because you do not need PRNGD. Note that other subsystems *do* require PRNGD so do not just stop it and hope everything works. Contact your vendor for requirements. For ITUGLIB, git, OpenSSL, curl, rsync, should not need PRNGD following these versions. Let us know if you find something different. Ideally, open a case at https://github.com/openssl/openssl/issues indicating NonStop in the title of the issue and probably note @rsbeckerca in the text of the case so that I will get notified when the case opens. For all OpenSSL cases, make sure to attach the output from perl configdata.pm --dump if you have build OpenSSL yourself.

Regards,
Randall Becker
On Behalf of the ITUGLIB Technical Committee.

Subject	Author
ITUGLIB Note: OpenSSL on L-series	Randall