<div dir="ltr">Thanks for fix, I was seeing these issues in couple components using nodejs-native (example bellow) and can confirm that this is now fixed.<div><br></div><div>internal/crypto/random.js:118<br> if (ex) throw ex;<br> ^<br><br>Error: error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy<br> at handleError (internal/crypto/random.js:117:14)<br> at Object.randomBytes (internal/crypto/random.js:52:19)<br> at TOPDIR/BUILD/work/x86_64-linux/node-gyp-native/0.12.2+gitAUTOINC+7e98c99ce7-r4/recipe-sysroot-native/usr/lib/node_modules/npm/lib/npm.js:424:32<br> at Object.<anonymous> (TOPDIR/BUILD/work/x86_64-linux/node-gyp-native/0.12.2+gitAUTOINC+7e98c99ce7-r4/recipe-sysroot-native/usr/lib/node_modules/npm/lib/npm.js:476:3)<br> at Module._compile (internal/modules/cjs/loader.js:778:30)<br> at Object.Module._extensions..js (internal/modules/cjs/loader.js:789:10)<br> at Module.load (internal/modules/cjs/loader.js:653:32)<br> at tryModuleLoad (internal/modules/cjs/loader.js:593:12)<br> at Function.Module._load (internal/modules/cjs/loader.js:585:3)<br> at Module.require (internal/modules/cjs/loader.js:692:17)<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Sep 17, 2019 at 8:50 PM Khem Raj <<a href="mailto:raj.khem@gmail.com" target="_blank">raj.khem@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">with openSSL 1.1.1d we start seeing errors like<br>
<br>
Error Generating Key<br>
139979727451584:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:<br>
<br>
when using openssl from openssl-native on build hosts, this is due to<br>
limiting the random seed to devrandom, to support older hosts, since the<br>
option allows to have a comma separated list of methods to try, we can<br>
try the default first and if that fails then fallback to devrandom, this<br>
will ensure that it keeps working with build systems which dont support<br>
getrandom()<br>
<br>
Signed-off-by: Khem Raj <<a href="mailto:raj.khem@gmail.com" target="_blank">raj.khem@gmail.com</a>><br>
Cc: Adrian Bunk <<a href="mailto:bunk@stusta.de" target="_blank">bunk@stusta.de</a>><br>
Cc: Alexander Kanavin <<a href="mailto:alex.kanavin@gmail.com" target="_blank">alex.kanavin@gmail.com</a>><br>
---<br>
meta/recipes-connectivity/openssl/<a href="http://openssl_1.1.1d.bb" rel="noreferrer" target="_blank">openssl_1.1.1d.bb</a> | 6 +++---<br>
1 file changed, 3 insertions(+), 3 deletions(-)<br>
<br>
diff --git a/meta/recipes-connectivity/openssl/<a href="http://openssl_1.1.1d.bb" rel="noreferrer" target="_blank">openssl_1.1.1d.bb</a> b/meta/recipes-connectivity/openssl/<a href="http://openssl_1.1.1d.bb" rel="noreferrer" target="_blank">openssl_1.1.1d.bb</a><br>
index 080d1a8bb7..072f727e0b 100644<br>
--- a/meta/recipes-connectivity/openssl/<a href="http://openssl_1.1.1d.bb" rel="noreferrer" target="_blank">openssl_1.1.1d.bb</a><br>
+++ b/meta/recipes-connectivity/openssl/<a href="http://openssl_1.1.1d.bb" rel="noreferrer" target="_blank">openssl_1.1.1d.bb</a><br>
@@ -43,10 +43,10 @@ do_configure[cleandirs] = "${B}"<br>
EXTRA_OECONF_append_libc-musl = " no-async"<br>
EXTRA_OECONF_append_libc-musl_powerpc64 = " no-asm"<br>
<br>
-# This prevents openssl from using getrandom() which is not available on older glibc versions<br>
+# adding devrandom prevents openssl from using getrandom() which is not available on older glibc versions<br>
# (native versions can be built with newer glibc, but then relocated onto a system with older glibc)<br>
-EXTRA_OECONF_class-native = "--with-rand-seed=devrandom"<br>
-EXTRA_OECONF_class-nativesdk = "--with-rand-seed=devrandom"<br>
+EXTRA_OECONF_class-native = "--with-rand-seed=os,devrandom"<br>
+EXTRA_OECONF_class-nativesdk = "--with-rand-seed=os,devrandom"<br>
<br>
# Relying on hardcoded built-in paths causes openssl-native to not be relocateable from sstate.<br>
CFLAGS_append_class-native = " -DOPENSSLDIR=/not/builtin -DENGINESDIR=/not/builtin"<br>
-- <br>
2.23.0<br>
<br>
-- <br>
_______________________________________________<br>
Openembedded-core mailing list<br>
<a href="mailto:Openembedded-core@lists.openembedded.org" target="_blank">Openembedded-core@lists.openembedded.org</a><br>
<a href="http://lists.openembedded.org/mailman/listinfo/openembedded-core" rel="noreferrer" target="_blank">http://lists.openembedded.org/mailman/listinfo/openembedded-core</a><br>
</blockquote></div>