LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 04-17-2013, 01:43 PM   #1
ali.abry
Member
 
Registered: Feb 2013
Posts: 74

Rep: Reputation: Disabled
is it normal that dnssec-keygen be this much slow ?


Hi
is it normal that dnssec-keygen be this much slow ?
i use this command :

Code:
$ sudo dnssec-keygen -a rsasha1 -b 2048 -n ZONE example.com
Generating key pair............
but after several minutes nothing happens.
 
Old 04-17-2013, 04:24 PM   #2
alkk
LQ Newbie
 
Registered: Feb 2013
Posts: 4

Rep: Reputation: Disabled
There are no enough entropy in the system; some i/o should resolve that (try to run "find /" in another window)
 
Old 04-17-2013, 05:57 PM   #3
ali.abry
Member
 
Registered: Feb 2013
Posts: 74

Original Poster
Rep: Reputation: Disabled
I tried it but nothing changed.
it steel tacks so long and nothing happens .
 
Old 04-17-2013, 08:21 PM   #4
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.8, Centos 5.10
Posts: 17,247

Rep: Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328
alkk is basically right; this requires a of of entropy. Think system usage.
Easiest is to fire this off in one window, then go on with normal work in other windows until its done.
IF no GUI, background the job with '&'.
 
Old 04-19-2013, 07:16 AM   #5
ali.abry
Member
 
Registered: Feb 2013
Posts: 74

Original Poster
Rep: Reputation: Disabled
is there a workable way that i could make enough entropy ?
 
Old 04-19-2013, 05:01 PM   #6
jpollard
Senior Member
 
Registered: Dec 2012
Location: Washington DC area
Distribution: Fedora, CentOS, Slackware
Posts: 4,654

Rep: Reputation: 1255Reputation: 1255Reputation: 1255Reputation: 1255Reputation: 1255Reputation: 1255Reputation: 1255Reputation: 1255Reputation: 1255
Quote:
Originally Posted by ali.abry View Post
is there a workable way that i could make enough entropy ?
No.

Entropy, to be valid, has to be random. "Making" entropy is automatically not random...
 
Old 04-21-2013, 04:15 AM   #7
ali.abry
Member
 
Registered: Feb 2013
Posts: 74

Original Poster
Rep: Reputation: Disabled
thanks every one .
so the only fast way that i found is to use /dev/urandom instead of using /dev/random . you can specify the source of random by using -r /dev/urandom in
dnssec-keygen command.
there's also a way in here http://www.howtoforge.com/helping-th...s-debian-lenny
tp make enough entropy . i didn't try it my self

Last edited by ali.abry; 04-21-2013 at 04:16 AM.
 
Old 04-21-2013, 06:50 AM   #8
jpollard
Senior Member
 
Registered: Dec 2012
Location: Washington DC area
Distribution: Fedora, CentOS, Slackware
Posts: 4,654

Rep: Reputation: 1255Reputation: 1255Reputation: 1255Reputation: 1255Reputation: 1255Reputation: 1255Reputation: 1255Reputation: 1255Reputation: 1255
urandom is not really a source of truly random numbers. It is a pseudorandom number generator that (as I understand it) starts from a seed from random, but if the entropy isn't there, it is purely a pseudorandom number generator with its own seed.

The tools you point to would use a hardware random number generator - if it is available. Otherwise it too is a pseudorandom number generator, just a different one.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
dnssec-keygen hangs jon3k Linux - Software 2 08-23-2015 06:06 PM
dnssec-keygen jittinan2 Linux - Software 1 12-20-2007 05:07 AM
dnssec-keygen jittinan2 Linux - Server 0 12-20-2007 04:53 AM
Slow mouse responsiveness in X, is this normal? orgee Linux - Software 20 10-25-2004 03:46 PM


All times are GMT -5. The time now is 08:36 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration