自签名证书的随机数错误

Question

我一直在尝试创建自签名证书，但不断收到与随机数生成器相关的错误。我在终端中输入了以下内容：

openssl req -x509 -days 365 -sha256 -newkey rsa:4096 -keyout mycert.pem -out mycert.pem

然后我会收到输入我的信息的提示。我很好地解决了这个问题，但是当我按 Enter 时，出现以下错误：

Cannot write random bytes:

139680915939776:error:2407007A:random number generator:RAND_write_file:Not a regular file:crypto/rand/randfile.c:163:Filename=/home/user/.rnd

Answer 1

通过使用以下代码替换 /usr/share/dovecot/dovecot-openssl.cnf内容解决了该问题：

[ req ]
default_bits = 2048
encrypt_key = yes
distinguished_name = req_dn
x509_extensions = cert_type
prompt = no

[ req_dn ]
# country (2 letter code)
#C=FI

# State or Province Name (full name)
#ST=

# Locality Name (eg. city)
#L=Helsinki

# Organization (eg. company)
#O=Dovecot

# Organizational Unit Name (eg. section)
OU=IMAP server

# Common Name (*.example.com is also possible)
CN=imap.example.com

# E-mail contact
emailAddress=postmaster@example.com

[ cert_type ]
nsCertType = server