Re: [Prelude Universal SIM system] #222: TLS Certificate generation takes ages
"Prelude Universal SIM system" <[email protected]> Mon, 05 Jan 2009 22:43:22 -0000
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#222: TLS Certificate generation takes ages
-------------------------------------------------+--------------------------
Reporter: Pierre Chifflier <chifflier@…> | Owner: yoann
Type: defect | Status: closed
Priority: normal | Milestone:
Component: prelude-manager | Version: 0.9
Severity: normal | Resolution: wontfix
Keywords: |
-------------------------------------------------+--------------------------
Comment(by jacek mendinka):
In order to accelerate the generation process, one can recur to the
instructions on: https://trac.prelude-ids.org/wiki/Misc/Entropy
In a debian system:
aptitude install rng-tools
vi /etc/default/rng-tools
Add the following lines to the configuration file
HRNGDEVICE=/dev/urandom
RNGDOPTIONS="-W 80% -t 20"
Start the entropy generator:
/etc/init.d/rng-tools start
The RSA private key generation should happen very quickly. BUT, as the
/dev/urandom is not a real rng, of course there are all the problems
related to the randomness of the generated numbers, entropy, etc. Beware!
If you don't know what is it, then don't do it.
--
Ticket URL: <https://trac.prelude-ids.org/ticket/222#comment:2>
Prelude Universal SIM system <http://www.prelude-ids.com>
Prelude Universal SIM system
_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-devel