--random-file docs
Hrvoje Niksic <[email protected]>
| Newsgroups | gmane.comp.web.wget.patches |
|---|---|
| Message-ID | <[email protected]> |
This adds documentation for the new --random-file cmdline option. 2005-04-27 Hrvoje Niksic <[email protected]> * wget.texi (HTTPS (SSL/TLS) Options): Document --random-file. Index: doc/wget.texi =================================================================== RCS file: /pack/anoncvs/wget/doc/wget.texi,v retrieving revision 1.122 diff -u -r1.122 wget.texi --- doc/wget.texi 2005/04/27 18:23:41 1.122 +++ doc/wget.texi 2005/04/27 21:08:14 @@ -1385,6 +1385,24 @@ Without this option Wget looks for CA certificates at the system-specified locations, chosen at OpenSSL installation time. +@cindex entropy, specifying source of +@cindex randomness, specifying source of +@item --random-file=@var{file} +Use @var{file} as the source of random data for seeding the +pseudo-random number generator on systems without @file{/dev/random}. + +On such systems the SSL library needs an external source of randomness +to initialize. Randomness may be provided by EGD (see +@samp{--egd-file} below) or read from an external source specified by +the user. If this option is not specified, Wget looks for random data +in @code{$RANDFILE} or, if that is unset, in @file{$HOME/.rnd}. If +none of those are available, it is likely that SSL encryption will not +be usable. + +If you're getting the ``Could not seed OpenSSL PRNG; disabling SSL.'' +error, you should provide random data using some of the methods +described above. + @cindex EGD @item --egd-file=@var{file} Use @var{file} as the EGD socket. EGD stands for @dfn{Entropy @@ -2694,6 +2712,10 @@ mbytes (@samp{m} appended). Thus @samp{quota = 5m} will set the quota to 5 megabytes. Note that the user's startup file overrides system settings. + +@item random_file = @var{file} +Use @var{file} as a source of randomness on systems lacking +@file{/dev/random}. @item read_timeout = @var{n} Set the read (and write) timeout---the same as