On Thu, Feb 04, 2010 at 10:53:20AM +0100, Dan Kopparhed wrote:
Hi, I ran into a problem that I suspect may be a bug in dnssec-keygen. Can someone confirm this?
I was trying to generate keys with the genDDNSkey script, but the script just freezes. So I had a look at the script and discovered that the problem occurs when calling dnssec-keygen. It sleeps, seemingly stuck waiting 4-ever (well, I honestly only tried for a few minutes). Actually, when trying this over and over again, it succeeded once out of something like 15+ attempts. I changed nothing between trials.
In opensuse 11.1, latest bind update, running this command immediately generates private and public keys Ktest.* /usr/sbin/dnssec-keygen -a HMAC-MD5 -b 512 -r /dev/random -n USER test
In opensuse 11.2, fully patched, the same command just falls asleep until killed.
The sleep might be due to reads from /dev/random, which blocks until enough randomness is there. Can you run strace and see where it blocks? Ciao, Marcus -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org