Document issue with --chroot, /dev/urandom and PolarSSL.
PATCH v2 1/1 Document issue with --chroot, /dev/urandom and PolarSSL.
See trac#218
--- doc/openvpn.8 | 10 ++++++++++ 1 file changed, 10 insertions(+)
doc/openvpn.8 +10 -0
@@ -2097,6 +2097,16 @@ In many cases, the parameter can point to an empty directory, however complications can result when scripts or restarts are executed after the chroot operation. + +Note: if OpenVPN is built using the PolarSSL SSL +library, +.B \-\-chroot +will only work if a /dev/urandom device node is available +inside the chroot directory +.B dir. +This is due to the way PolarSSL works (it wants to open +/dev/urandom every time randomness is needed, not just once +at startup) and nothing OpenVPN can influence. .\"********************************************************* .TP .B \-\-setcon context
Signature · 1 line
1.8.3.2
ACK
-Steffan
Quoted 45 lines · Gert Doering
See trac#218
Signed-off-by Gert Doering <[email protected]...>--- doc/openvpn.8 | 10 ++++++++++ 1 file changed, 10 insertions(+)doc/openvpn.8 +10
-1@@ -2097,6 +2097,16 @@ In many cases, the parameter can point to an empty directory, however complications can result when scripts or restarts are executed after the chroot operation. + +Note: if OpenVPN is built using the PolarSSL SSL +library, +.B \-\-chroot +will only work if a /dev/urandom device node is available +inside the chroot directory +.B dir. +This is due to the way PolarSSL works (it wants to open +/dev/urandom every time randomness is needed, not just once +at startup) and nothing OpenVPN can influence. .\"********************************************************* .TP .B \-\-setcon context --1.8.3.2
------------------------------------------------------------------------------
CenturyLink Cloud: The Leader in Enterprise Cloud Services. Learn Why More Businesses Are Choosing CenturyLink Cloud For Critical Workloads, Development Environments & Everything In Between. Get a Quote or Start a Free Trial Today.http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk
_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
Patch has been applied to the master and release/2.3 branch.
commit b238a1f2d4b2cdcfc844689b33fd3ac43ed31c1c (master) commit 2600680ec2fd3cc27d7222154a637995fd90330f (release/2.3)
Author: Gert Doering Date: Sat Jan 11 12:50:36 2014 +0100
Document issue with --chroot, /dev/urandom and PolarSSL.
Signed-off-by: Gert Doering <[email protected]...>
Acked-by: Steffan Karger <[email protected]...>
Message-Id: <[email protected]...>
URL: http://article.gmane.org/gmane.network.openvpn.devel/8213--
kind regards,
Gert Doering