# Seed the OpenSSL random number generator

The [OpenSSL](https://www.openssl.org) library is used to encrypt DataSource and RTTP connections in C-based DataSource applications (including [Liberator](../liberator/index.md) and [Transformer](../transformer/index.md)). OpenSSL uses its own pseudo random number generator (PRNG), seeded on startup from a source of random data provided by the operating system.

On Linux, the PRNG is seeded from the non-blocking device file `/dev/urandom`. On Microsoft Windows, the PRNG is seeded from [CryptGenRandom](https://learn.microsoft.com/en-gb/windows/win32/api/wincrypt/nf-wincrypt-cryptgenrandom) and other sources of entropy. Source: [Seeds](https://wiki.openssl.org/index.php/Random_Numbers#Seeds) in _Random Numbers_ on the OpenSSL Wiki.

If the standard sources of entropy used to automatically seed OpenSSL’s PRNG do not comply with your organisation’s security policy, the `ssl-random-seed` configuration item provides you with the flexibility to seed OpenSSL’s PRNG with a specific source of entropy.

For more information, see:

* Liberator: [ssl-random-seed](../liberator/liberator-https-configuration.md#ssl-random-seed)
* DataSource: [ssl-random-seed](datasource-datasource-secure-sockets-layer-ssl-configuration.md#ssl-random-seed)

Add the configuration to the appropriate overrides file in the [Deployment Framework](../deployment-framework/index.md):

* **Liberator**: `<Framework-root>/global_config/overrides/servers/Liberator/etc/rttpd.conf`
* **Transformer**: `<Framework-root>/global_config/overrides/servers/Transformer/etc/transformer.conf`
* **Adapter blade**: `<Framework-root>/global_config/overrides/<AdapterBladeName>/DataSource/etc/<AdapterName>.conf`

---

**See also:**

* How can I... [Set up secure connections between DataSource applications](datasource-set-up-secure-connections-between-datasource-applications.md)
* How can I... [Configure how Liberator handles HTTPS connections](../liberator/liberator-configure-how-liberator-handles-https-connections.md)
* How can I... [Configure how Liberator handles direct client connections](../liberator/liberator-configure-how-liberator-handles-direct-client-connections.md)