- (djm) Tell users to configure /dev/random support into OpenSSL in INSTALL

diff --git a/ChangeLog b/ChangeLog
index ce640435a9512f047d482c243d468ebd141bb964..4d30cbf34e28196b4fbc928f1baf2ce4ca19c893 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,6 @@
+20020417
+ - (djm) Tell users to configure /dev/random support into OpenSSL in INSTALL
+
 20020415
  - (djm) Unbreak "make install". Fix from Darren Tucker <dtucker@zip.com.au>
  - (stevesk) bsd-cygwin_util.[ch] BSD license from Corinna Vinschen

diff --git a/INSTALL b/INSTALL
index bfd2b68b728d63a73f8627fcfec91e6e475ece07..5765216e05b5d67a297e7cd736dfee45b8398806 100644 (file)
--- a/INSTALL
+++ b/INSTALL
@@ -17,6 +17,11 @@ OpenSSH can utilise Pluggable Authentication Modules (PAM) if your system
 supports it. PAM is standard on Redhat and Debian Linux, Solaris and
 HP-UX 11.
 
+NB. If you operating system supports /dev/random, you should configure 
+OpenSSL to use it. OpenSSH relies on OpenSSL's direct support of 
+/dev/random. If you don't you will have to rely on ssh-rand-helper, which 
+is inferior to a good kernel-based solution.
+
 PAM:
 http://www.kernel.org/pub/linux/libs/pam/