Bind 9.5.0-P2, DNSSEC and /dev/random

Michael michael at networkstuff.co.nz
Sat Aug 30 12:45:54 UTC 2008


On Sun, 31 Aug 2008 02:40:36 you wrote:
> > Hello all-
> >
> > The following command-
> >
> > /usr/local/sbin/dnssec-keygen -r /dev/random -f KSK -a RSASHA1 -b 1024 -n
> > ZON E
> > example.com
> >
> > stalls. The system is Slackware Linux 12.1 with kernel 2.6.23-11.
> >
> > Michael
>
> 	You need to cause the kernel to gather entropy. The way to
> 	do that is to make the kernel do work.
>
> 	e.g.
> 		ls -R /

While this does increase the entropy to over 3,000, it still doesn't work (and 
the entropy sinks within a few seconds anyway)


More information about the bind-users mailing list