/dev/urandom not included in chroot, leads to crashes with static key
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| network-manager-openvpn (Debian) |
Fix Released
|
Unknown
|
|||
| network-manager-openvpn (Ubuntu) |
Confirmed
|
High
|
Unassigned | ||
Bug Description
I am trying to connect to an OpenVPN server with a static key and get these error messages in the logfile:
Aug 30 10:31:37 defiant nm-openvpn[11201]: RAND_bytes() failed
Aug 30 10:31:37 defiant nm-openvpn[11201]: Assertion failed at crypto.c:1386 (rand_bytes (output, len))
Aug 30 10:31:37 defiant nm-openvpn[11201]: Exiting due to fatal error
This looks like Debian bug #820554
ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: network-
ProcVersionSign
Uname: Linux 4.4.0-36-generic x86_64
NonfreeKernelMo
ApportVersion: 2.20.1-0ubuntu2.1
Architecture: amd64
CurrentDesktop: XFCE
Date: Tue Aug 30 10:37:43 2016
InstallationDate: Installed on 2012-06-14 (1537 days ago)
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Release amd64 (20120425)
SourcePackage: network-
UpgradeStatus: Upgraded to xenial on 2016-08-30 (0 days ago)
| Robert Sander (gurubert) wrote | #1 |
| Robert Sander (gurubert) wrote | #2 |
| Changed in network-manager-openvpn (Debian): | |
| status: | Unknown → New |
| Launchpad Janitor (janitor) wrote | #3 |
| Changed in network-manager-openvpn (Ubuntu): | |
| status: | New → Confirmed |
| Luca Bellinzaghi (luca-bellinzaghi) wrote | #4 |
| Alberto Salvia Novella (es20490446e) wrote | #5 |
| Changed in network-manager-openvpn (Ubuntu): | |
| status: | Confirmed → Incomplete |
| Robert Sander (gurubert) wrote | #6 |
| Changed in network-manager-openvpn (Ubuntu): | |
| status: | Incomplete → Confirmed |
| Changed in network-manager-openvpn (Ubuntu): | |
| importance: | Undecided → Medium |
| importance: | Medium → High |
| Changed in network-manager-openvpn (Debian): | |
| status: | New → Fix Released |
Solution:
Create a directory /var/lib/
Create device nodes for random and urandom within the chroot dev directory:
mknod random c 1 8
mknod urandom c 1 9