/dev/random & SSH

[Chris Wong]

Hi,
I've written up a short paper on using /dev/random with SSH. (Installing, performance & security). I'm interested in feedback regarding the article and especially any experiences other have had in using /dev/random in a production environment (with or without SSH).

http://newfdawg.com/SSHpart5.htm

TIA.
- Chris

[H.Merijn Brand (procura]

This is exactly what we are looking for, BUT


It's for 11i only, and we need it for 11.00. Do you have solutions for 11.00 too? Please?

Enjoy, have FUN! H.Merijn

[Chris Wong]

Maybe someone from HP can answer the question if/when /dev/random will be available for 11.0.

Otherwise... I'd say update-ux. :->

- Chris

[H.Merijn Brand (procura]

*we* could, but *our customers* can't. They will have to use it too. :/

Enjoy, have FUN! H.Merijn

[Jdamian]

I'm an HP-UX 11.00 administrator and I'm interested in getting /dev/random on my boxes.

I think HP is very dark in this kind of issues. I also think HP is slow for implementing easy solutions available yes in other Unix environments (as Linux). For instance, it is possible create /dev/zero in HP-UX 11.00 but I cannot find any man page where it is described.

Other issue may be internet security... HP startet support for OpenSSH but HP doesn't support PGP (other interesting security product)

[doug hosking · Accepted solution]

Sorry, but there are currently no plans to support /dev/random on 11.00.

As for /dev/zero, HP-UX 11.22 a.k.a 11i V1.6 does formally document /dev/zero at last.

[Roger Crettol]

Damian,

I can't remember where I picked this up, but
making /dev/zero goes like this :

------------------------------
#!/bin/sh

# major/minor for HPUX 11.X
mknod /dev/zero c 3 4
chown bin:bin /dev/zero
chmod 666 /dev/zero
-------------------------------

Though I don't know what the results of writing to /dev/zero might be ... reading
from it works fine.

-rg-

[Berlene Herren]

We do have it here for 11i, I do not know if it will work for 11.0

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=KRNG11I

Berlene

[doug hosking]

Berlene, as released it will NOT work on 11.00. This has heavy dependencies on kernel internals and specific kernel patches that vary from release to release. The primary author of the code in question sat directly across the hall from me. Trust me. :-)

[Berlene Herren]

Thanks, Doug, glad you said that. But it is there for 11i, and does not come with the native OS.

Berlene