Re: [Prelude Universal SIM system] #222: TLS Certificate generation takes ages

"Prelude Universal SIM system" <[email protected]> Mon, 05 Jan 2009 22:43:22 -0000
Newsgroups gmane.comp.security.ids.prelude.devel
Message-ID <[email protected]>
#222: TLS Certificate generation takes ages
-------------------------------------------------+--------------------------
 Reporter:  Pierre Chifflier <chifflier@…>       |        Owner:  yoann  
     Type:  defect                               |       Status:  closed 
 Priority:  normal                               |    Milestone:         
Component:  prelude-manager                      |      Version:  0.9    
 Severity:  normal                               |   Resolution:  wontfix
 Keywords:                                       |  
-------------------------------------------------+--------------------------

Comment(by jacek mendinka):

 In order to accelerate the generation process, one can recur to the
 instructions on: https://trac.prelude-ids.org/wiki/Misc/Entropy

 In a debian system:

  aptitude install rng-tools
  vi /etc/default/rng-tools

 Add the following lines to the configuration file

  HRNGDEVICE=/dev/urandom
  RNGDOPTIONS="-W 80% -t 20"

 Start the entropy generator:
  /etc/init.d/rng-tools start

 The RSA private key generation should happen very quickly. BUT, as the
 /dev/urandom is not a real rng, of course there are all the problems
 related to the randomness of the generated numbers, entropy, etc. Beware!
 If you don't know what is it, then don't do it.

-- 
Ticket URL: <https://trac.prelude-ids.org/ticket/222#comment:2>
Prelude Universal SIM system <http://www.prelude-ids.com>
Prelude Universal SIM system
_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-devel