Point out the PRNG usage bug affecting openssl rsa.

(Should we point to snapshots, or directly give the one-line patch?)

diff --git a/FAQ b/FAQ
index 58650cfd74e5ddafb992b3839b63908fbfb4315c..78018fc8fed88b546ed313b7115a52a8e1f4095c 100644 (file)
--- a/FAQ
+++ b/FAQ
@@ -109,6 +109,10 @@ Most components of the openssl command line tool try to use the
 file $HOME/.rnd (or $RANDFILE, if this environment variable is set)
 for seeding the PRNG.  If this file does not exist or is too short,
 the "PRNG not seeded" error message may occur.
+Note that the command "openssl rsa" in OpenSSL 0.9.5 does not do this
+and will fail on systems without /dev/urandom when trying to
+password-encrypt an RSA key!  This is a bug in the library;
+try a later snaphost instead.
 
 
 * Why does the linker complain about undefined symbols?