dnssec-keygen just hangs on Three Different FreeBSD Systems.

[Mark_Andrews at isc.org]

> 	I just tried to generate a key using dnssec-keygen
> /usr/local/sbin/dnssec-keygen -a hmac-md5 -b 512 -n HOST mykey.
> 
> on a Freebsd system and it simply hung and never generated
> anything.
> 
> 	I tried the same command on a Linux system and have done
> it on a FreeBSD system before and it worked.
> 
> 	I tried the same command on 2 other FreeBSD systems and
> they hung also.  One thing they all have in common is that I set
> them up, but I am not sure what I might have done to cause this
> problem.  All of the systems run bind9 and all are otherwise
> working properly.
> 
> Martin McCormick 405 744-7572   Stillwater, OK
> OSU Center for Computing and Information services Network Operations Group
> 

	From FAQ:

Q: I have Freebsd 4.4 and "rndc-confgen -a" just sits there.

A: /dev/random is not configured.  Use rndcontrol(8) to tell the kernel
to use certian interupts as a source of random events.  You can make this
permanent by setting rand_irqs in /etc/rc.conf.

e.g.
        /etc/rc.conf
        rand_irqs="3 14 15"


	Note you may need exercise the kernel such that interrupts are
	generated.

	Mark
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org