Generate .rnd file if it doesn't exist.

[msaggiorato]

This fixes an issue with the latest box (and also a couple of versions before), which didn't have a proper /root/.rnd file which is necessary for generating a certificate.

Seems to address #2072 , right now tls-ca is working for me without the change in syntax proposed in #2073 .

I got this error while provisioning from scratch with 3.2.0 and 3.3.0 with the latest box.

 * Sign the certificate using the above private key...
Can't load /root/.rnd into RNG
139738907833408:error:2406F079:random number generator:RAND_load_file:Cannot open file:../crypto/rand/randfile.c:98:Filename=/root/.rnd

[h4r1m4u]

I tried this and it doesn't fix the #2072 issue for me. The 'if' block in provision/provision-site.sh always executes the 'else' branch and the provisioned sites use the default vvv.test certificate instead of their own certs.

[Mte90]

I don't get that error on provisioning but I don't think that is a problem to add that check for the machine to avoid issues for others, what do you think @tomjn?

[tomjn]

Does this belong in the nginx setup? I don't have a /root/.rnd in my VM, I believe this is unrelated to #2072

[tomjn]

Related OpenVPN/easy-rsa#261 and https://security.stackexchange.com/questions/177509/purpose-of-randfile-in-openssl/177512#177512

Information Security Stack Exchange

Purpose of RANDFILE in OpenSSL?

What is the purpose of the RANDFILE in an OpenSSL configuration file (specifically, the ca section)? The man page entry, config, just describes this as: At startup the specified file is loaded i...

[msaggiorato]

For me, not having this file made the SSL configuration of nginx not work at all. That's why I attempted this.

This is on a fresh provision (after a full destroy, and with the latest box).