dnssec-keygen just hangs on Three Different FreeBSD Systems.

[phn at icke-reklam.ipsec.nu]

Martin McCormick <martin at dc.cis.okstate.edu> wrote:
> 	I just tried to generate a key using dnssec-keygen
> /usr/local/sbin/dnssec-keygen -a hmac-md5 -b 512 -n HOST mykey.

> on a Freebsd system and it simply hung and never generated
> anything.

> 	I tried the same command on a Linux system and have done
> it on a FreeBSD system before and it worked.

> 	I tried the same command on 2 other FreeBSD systems and
> they hung also.  One thing they all have in common is that I set
> them up, but I am not sure what I might have done to cause this
> problem.  All of the systems run bind9 and all are otherwise
> working properly.

> Martin McCormick 405 744-7572   Stillwater, OK
> OSU Center for Computing and Information services Network Operations Group


You might need to get /dev/random working. This needs a seed , configured
into /etc/rc.conf , see /etc/defaults/t.conf :
rand_irqs="NO"          # Stir the entropy pool (like "5 11" or NO).

replace with used irq in your machine.


-- 
Peter Håkanson         
        IPSec  Sverige      ( At Gothenburg Riverside )
           Sorry about my e-mail address, but i'm trying to keep spam out,
	   remove "icke-reklam" if you feel for mailing me. Thanx.