Re: [Prelude Universal SIM system] #222: TLS Certificate generation takes ages
"Prelude Universal SIM system" <[email protected]> Mon, 05 Jan 2009 22:57:16 -0000
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#222: TLS Certificate generation takes ages
-------------------------------------------------+--------------------------
Reporter: Pierre Chifflier <chifflier@…> | Owner: yoann
Type: defect | Status: closed
Priority: normal | Milestone:
Component: prelude-manager | Version: 0.9
Severity: normal | Resolution: wontfix
Keywords: |
-------------------------------------------------+--------------------------
Comment(by jacek mendinka):
Now, correctly formatted (sorry!)
In order to accelerate the generation process, one can recur to the
instructions on https://trac.prelude-ids.org/wiki/Misc/Entropy
In a debian system:
{{{
aptitude install rng-tools
vi /etc/default/rng-tools
}}}
Add the following lines to the configuration file
{{{
HRNGDEVICE=/dev/urandom
RNGDOPTIONS="-W 80% -t 20"
}}}
Start the entropy generator:
{{{
/etc/init.d/rng-tools start
}}}
The RSA private key generation should happen very quickly. BUT, as the
/dev/urandom is not a real rng, of course there are all the problems
related to the randomness of the generated numbers, entropy, etc. Beware!
If you don't know what is it, then don't do it.
--
Ticket URL: <https://trac.prelude-ids.org/ticket/222#comment:3>
Prelude Universal SIM system <http://www.prelude-ids.com>
Prelude Universal SIM system
_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-devel