Re: [Prelude Universal SIM system] #222: TLS Certificate generation takes ages

"Prelude Universal SIM system" <[email protected]> Mon, 05 Jan 2009 22:57:16 -0000
Newsgroups gmane.comp.security.ids.prelude.devel
Message-ID <[email protected]>
#222: TLS Certificate generation takes ages
-------------------------------------------------+--------------------------
 Reporter:  Pierre Chifflier <chifflier@…>       |        Owner:  yoann  
     Type:  defect                               |       Status:  closed 
 Priority:  normal                               |    Milestone:         
Component:  prelude-manager                      |      Version:  0.9    
 Severity:  normal                               |   Resolution:  wontfix
 Keywords:                                       |  
-------------------------------------------------+--------------------------

Comment(by jacek mendinka):

 Now, correctly formatted (sorry!)
 In order to accelerate the generation process, one can recur to the
 instructions on https://trac.prelude-ids.org/wiki/Misc/Entropy

 In a debian system:
 {{{
  aptitude install rng-tools
  vi /etc/default/rng-tools
 }}}

 Add the following lines to the configuration file
 {{{
  HRNGDEVICE=/dev/urandom
  RNGDOPTIONS="-W 80% -t 20"
 }}}
 Start the entropy generator:
 {{{
  /etc/init.d/rng-tools start
 }}}

 The RSA private key generation should happen very quickly. BUT, as the
 /dev/urandom is not a real rng, of course there are all the problems
 related to the randomness of the generated numbers, entropy, etc. Beware!
 If you don't know what is it, then don't do it.

-- 
Ticket URL: <https://trac.prelude-ids.org/ticket/222#comment:3>
Prelude Universal SIM system <http://www.prelude-ids.com>
Prelude Universal SIM system
_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-devel