Seed the OpenSSL random number generator

The OpenSSL software is used to implement the security policies for secure connections between C-based DataSource applications (inlcuding Liberator and Transformer), HTTPS connections to Liberator and direct SSL connections to Liberator. Open SSL uses a random number generator that has to be seeded at runtime. On Linux, OpenSSL is by default seeded by using an effectively random feature of one of the host machine’s hardware devices. On other platforms, it may be necessary to explicitly seed the number generator. You can do this by specifying the ssl-random-seed configuration item.

Here’s an example:

ssl-random-seed builtin
ssl-random-seed file etc/randomdata
ssl-random-seed file etc/randomdata 1024
ssl-random-seed exec etc/random.sh
ssl-random-seed exec etc/random.sh 512

Add the configuration to the appropriate overrides file in the Deployment Framework:

See also: