Thanks atoponce for your detailed response!
I did change the config to use the /dev/urandom again for the openssl package. I will rely on the knowledge of your Cryptographers, the developers of CSPRNG and OpenSSL.
Thanks! Fred.
