dnssec-keygen is waiting endless...

Paul Wouters paul at xelerance.com
Fri May 28 16:34:16 UTC 2010


On Fri, 28 May 2010, Michelle Konzack wrote:

> Hello *;
>
> I am retrying to setup DNSSEC but I have a problem with:
>
>    dnssec-keygen -a RSASHA1 b 1024 -n ZONE tamay-dogan.net
>
> because if I issue the command, it waits forever and nothing happen.
>
> What can this be?
>
> Operating System is "Debian GNU/Linux 5.0 Lenny" with bind9 in version
> 1:9.7.0.dfsg.P1-1~bpo50+1

My bet is that this is a VM and you have no entropy. Either generate some
entropy (eg run in paralel something like: find / -type f | xargs grep KSdgajkgdaksdga)
or create the keys on real iron instead of a VM.

Paul



More information about the bind-users mailing list