<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-2022-jp">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:"MS PGothic";
panose-1:2 11 6 0 7 2 5 8 2 4;}
@font-face
{font-family:"\@MS PGothic";
panose-1:2 11 6 0 7 2 5 8 2 4;}
@font-face
{font-family:"\@MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"MS Gothic";
mso-fareast-language:JA;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"MS PGothic",sans-serif;
mso-fareast-language:JA;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Consolas",serif;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">See the error message about looking at the FAQ? Here it is:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">https://www.openssl.org/docs/faq.html#USER1<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="mso-fareast-language:JA">From:</span></b><span style="mso-fareast-language:JA"> openssl-users [mailto:openssl-users-bounces@openssl.org]
<b>On Behalf Of </b>aakash.kumar@orange.com<br>
<b>Sent:</b> Sunday, October 07, 2018 22:51<br>
<b>To:</b> openssl-users@openssl.org<br>
<b>Cc:</b> osf-contact@openssl.org<br>
<b>Subject:</b> Re: [openssl-users] osf-contact Latest Openssl Issue with Bind 9.12.2-P2 on RHEL 7.5<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoPlainText"><span lang="EN-IN">Hi Team,<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Please find below error in text format.<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><b><span lang="EN-IN">[root@g3r1 ~]# systemctl status bind -l<o:p></o:p></span></b></p>
<p class="MsoPlainText"><span lang="EN-IN">● bind.service - LSB: DNS Daemon<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"> Loaded: loaded (/etc/rc.d/init.d/bind)<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"> Active: active (exited) since Fri 2018-10-05 13:31:09 CEST; 2 days ago<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"> Docs: man:systemd-sysv-generator(8)<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"> Process: 32417 ExecStop=/etc/rc.d/init.d/bind stop (code=exited, status=0/SUCCESS)<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"> Process: 32421 ExecStart=/etc/rc.d/init.d/bind start (code=exited, status=0/SUCCESS)<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 05 13:31:09 g3r1 named[32429]: ----------------------------------------------------<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 05 13:31:09 g3r1 named[32429]: adjusted limit on open files from 4096 to 1048576<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 05 13:31:09 g3r1 named[32429]: found 1 CPU, using 1 worker thread<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 05 13:31:09 g3r1 named[32429]: using 1 UDP listener per interface<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 05 13:31:09 g3r1 named[32429]: using up to 4096 sockets<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 05 13:31:09 g3r1 named[32429]: openssl_link.c:296: fatal error:<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 05 13:31:09 g3r1 named[32429]: OpenSSL pseudorandom number generator cannot be initialized (see the `PRNG not seeded' message in the OpenSSL FAQ)<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 05 13:31:09 g3r1 named[32429]: exiting (due to fatal error in library)<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 05 13:31:09 g3r1 bind[32421]: [13B blob data]<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 05 13:31:09 g3r1 systemd[1]: Started LSB: DNS Daemon.<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="FR">[root@g3r1 ~]# tail /var/log/message<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 systemd: Starting LSB: DNS Daemon...<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 bind: /etc/rc.d/init.d/bind: line 36: log_info_msg: command not found<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: starting BIND 9.12.2-P2 <id:b2bf278><o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: running on Linux x86_64 3.10.0-327.13.1.el7.x86_64 #1 SMP Mon Feb 29 13:22:02 EST 2016<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: built with '--prefix=/usr' '--sysconfdir=/etc' '--localstatedir=/var' 'mandir=/usr/share/man' '--enable-threads' '--with-libtool' '--with-openssl=/usr/local/ssl' '--disable-static'
'--with-randomdev=/dev/urandom'<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: running as: named -u named -t /srv/named -c /etc/named.conf<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: compiled by GCC 4.8.5 20150623 (Red Hat 4.8.5-28)<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: compiled with OpenSSL version: OpenSSL 1.0.2p 14 Aug 2018<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: linked to OpenSSL version: OpenSSL 1.0.2p 14 Aug 2018<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: compiled with zlib version: 1.2.7<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: linked to zlib version: 1.2.7<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: threads support is enabled<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: ----------------------------------------------------<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: BIND 9 is maintained by Internet Systems Consortium,<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: Inc. (ISC), a non-profit 501(c)(3) public-benefit<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: corporation. Support and training for BIND 9 are<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: available at https://www.isc.org/support<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: ----------------------------------------------------<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: adjusted limit on open files from 4096 to 1048576<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: found 1 CPU, using 1 worker thread<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: using 1 UDP listener per interface<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: using up to 4096 sockets<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: openssl_link.c:296: fatal error:<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Oct 5 13:31:09 g3r1 named[32429]: OpenSSL pseudorandom number generator cannot be initialized (see the `PRNG not seeded' message in the OpenSSL FAQ)<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Thanks & Regards,<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Aakash kumar<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">ITE - India<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Tower B, 8th Floor, DLF Infinity Towers,
<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">DLF Cyber City Phase - II<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Gurgaon - 122002, Haryana, INDIA<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="FR">Aakash.kumar@orange.com<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="FR"> <o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="FR"> Mobile: +91-8527288977<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="FR"> </span><span lang="EN-IN">CVS: 7357 3706<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span style="mso-fareast-language:EN-IN">-----Original Message-----<br>
From: Viktor Dukhovni [mailto:openssl-users@dukhovni.org] <br>
Sent: 05 October 2018 21:23<br>
To: KUMAR Aakash IMT/OINIS<br>
Cc: osf-contact@openssl.org; SRIVASTAVA Himanshu IMT/OINIS; VARSHNEY Praveen IMT/OINIS<br>
Subject: Re: osf-contact Latest Openssl Issue with Bind 9.12.2-P2 on RHEL 7.5</span><span lang="EN-IN"><o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Please try to send the text of error reports, not pictures.<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">> I am getting below error while starting the bind service.<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">> <o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">> <image002.png><o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">If you ask on the openssl-users list, someone else may have seen<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">the same issue, and may have useful advice to share.<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">NOTE!!!: I've set the Reply-To: address to <openssl-users@openssl.org>.<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">If you just hit "Reply", your answer may go to the list, though you'd<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">need to join the list first to be able to post...<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Does the error still happen when you disable "chroot" in BIND?<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">Perhaps BIND is doing late initialization of the PRNG after<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">entering the chroot jail, and maybe trying to use "/dev/urandom",<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">which not be in the jail? That's a wild guess. You'd need to<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">trace system calls to see what it is actually doing...<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN">-- <o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"> Viktor.<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-IN"><o:p> </o:p></span></p>
<pre><span lang="EN-IN">_________________________________________________________________________________________________________________________<o:p></o:p></span></pre>
<pre><span lang="EN-IN"><o:p> </o:p></span></pre>
<pre><span lang="EN-IN">Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc<o:p></o:p></span></pre>
<pre><span lang="EN-IN">pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler<o:p></o:p></span></pre>
<pre><span lang="EN-IN">a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,<o:p></o:p></span></pre>
<pre><span lang="EN-IN">Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.<o:p></o:p></span></pre>
<pre><span lang="EN-IN"><o:p> </o:p></span></pre>
<pre><span lang="EN-IN">This message and its attachments may contain confidential or privileged information that may be protected by law;<o:p></o:p></span></pre>
<pre><span lang="EN-IN">they should not be distributed, used or copied without authorisation.<o:p></o:p></span></pre>
<pre><span lang="EN-IN">If you have received this email in error, please notify the sender and delete this message and its attachments.<o:p></o:p></span></pre>
<pre><span lang="EN-IN">As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.<o:p></o:p></span></pre>
<pre><span lang="EN-IN">Thank you.<o:p></o:p></span></pre>
</div>
</body>
</html>