[almost resolved..] curl: (27) PRNG seeding failed



  • Hi all, I researched the community blogs but could not find this particular issue.

    I am trying to get the onion to post reports to my Prowl app for a motion detection project.
    I copied my Domoticz script API key and installed the basic curl program on the onion2 with 'opkg install curl'.

    When activating the script I first got nothing but when executing the various lines seperate on the command line I got a "curl: (27) PRNG seeding failed". Then offcourse I checked my onion software and upgraded today to the latest distro.
    (I had to re-install curl after doing that.

    Both times I used this command (API Key obfuscated offcourse..:grinning: ):

    curl https://prowl.weks.net/publicapi/add -F apikey="c0debeefc0debeefcodebeef9999888877770000" -F application="
    test" -F priority="2" -F event="testingtesting" -F description="Test..yes 4 real"

    I checked the curl version on the onion:

    curl -V'
    curl 7.52.1 (mipsel-openwrt-linux-gnu) libcurl/7.52.1 mbedTLS/2.4.0

    In the Curl GitHub the PRNG matter is discussed and it seems solved in version 7.53.1 for both 'curl' and the 'libcurl' components.
    See link * PRNG seeding failed #1268 (refferring to https://github.com/curl/curl/issues/1268)

    The curl error 77 is a bit more problematic. I researched some posts but I assume it needs a bit of 'surgery' on the onion repo if I look at this post:
    https://askubuntu.com/questions/646594/how-to-fix-ca-cert-issues-with-curl-in-ubuntu-14-04
    The file mentioned in the error is not there on the onion. The certificate of the website I try to post to is issued by GeoTrust Inc CA and does not seem to be in the CA list. <resolved partly by opkg install ca-bundle>

    My questions:

    1. Am I doing something wrong to my onion? (:volcano: )
    2. Does the onion needs to include an update mechanism for installing trusted CAs?
    3. What is a recommended action and beta-test of the possible solution?

    <<edit after post>>
    I used the opkg install ca-bundle from 'https://community.onion.io/topic/1891/error-reading-ca-cert-file' and now I am back to my curl error 27: PRNG seeding failed, so, still stuck.

    Kind regards



  • @Tech49 had the exact same problem, solved it by upgrading both curl and libcurl. It had nothing to do with CAs

    check which library version is being loaded. Here's the output from mine:

    root@Omega:~# curl -V
    curl 7.53.1 (mipsel-openwrt-linux-gnu) libcurl/7.53.1 mbedTLS/2.4.2
    Protocols: file ftp ftps http https
    Features: IPv6 Largefile SSL
    


  • @Venet, thanks, that is in the line of thought. When I did the:

    opkg install curl

    I got the 7.52.1 versions. So I assume the current Omega lib's are pushing that version.

    Did you use another libsource or opkg command to pull the 7.53.1 versions to your Omega?


Log in to reply
 

Looks like your connection to Onion Community was lost, please wait while we try to reconnect.