Using OpenSSL what does “unable to write ‘random state'” mean?

by

In practice, the most common reason for this happening seems to be that the .rnd file in your home directory is owned by root rather than your account. The quick fix:

sudo rm ~/.rnd

For more information, here’s the entry from the OpenSSL FAQ:

Sometimes the openssl command line utility does not abort with a “PRNG not seeded” error message, but complains that it is “unable to write ‘random state'”. This message refers to the default seeding file (see previous answer). A possible reason is that no default filename is known because neither RANDFILE nor HOME is set. (Versions up to 0.9.6 used file “.rnd” in the current directory in this case, but this has changed with 0.9.6a.)

So I would check RANDFILE, HOME, and permissions to write to those places in the filesystem.

If everything seems to be in order, you could try running with strace and see what exactly is going on.

More Related Contents:

  1. How can I transform between the two styles of public key format, one “BEGIN RSA PUBLIC KEY”, the other is “BEGIN PUBLIC KEY”
  2. Differences between “BEGIN RSA PRIVATE KEY” and “BEGIN PRIVATE KEY”
  3. Converting pfx to pem using openssl
  4. CMake not able to find OpenSSL library
  5. Use RSA private key to generate public key? [closed]
  6. Converting PKCS#12 certificate into PEM using OpenSSL
  7. Difference between openSSL rsautl and dgst
  8. Verify a certificate chain using openssl verify
  9. Convert PEM traditional private key to PKCS8 private key
  10. Multiple OpenSSL RSA signing methods produce different results
  11. How to extract public key using OpenSSL?
  12. OpenSSL Verify return code: 20 (unable to get local issuer certificate)
  13. How do I manage the error “OpenSSL v1.1.1 ssl_choose_client_version unsupported protocol”? [closed]
  14. Why is Apple Deprecating OpenSSL in MacOS 10.7 (Lion)? [closed]
  15. RSA: Get exponent and modulus given a public key
  16. Correct location of openssl.cnf file
  17. Programmatically Create X509 Certificate using OpenSSL
  18. How to generate an openSSL key using a passphrase from the command line?
  19. Convert pem key to ssh-rsa format
  20. How to save public key from a certificate in .pem format
  21. How to create public and private key with openssl?
  22. How to convert an ECDSA key to PEM format
  23. Unable to load Private Key. (PEM routines:PEM_read_bio:no start line:pem_lib.c:648:Expecting: ANY PRIVATE KEY) [closed]
  24. Creating a .p12 file
  25. How do I get Visual Studio Code to trust our self-signed proxy certificate?
  26. When was TLS 1.2 support added to OpenSSL?
  27. Cross Compile OpenSSH for ARM
  28. How to make browser trust localhost SSL certificate? [closed]
  29. How to install latest version of openssl Mac OS X El Capitan
  30. How can I sign a file using RSA and SHA256 with .NET?

Leave a Comment