generating dnssec keys for a zone

jmoe74

I am trying to generate dnssec keys for my zone. When I type the command:

dnssec-keygen -a RSA -b 512 -n ZONE myzone.com

from my working named directory, it looks like the command is doing something, but it has been running for at least 30 min now. I am wondering if this should take this long or if I am doing something wrong.

kidders

Hi there,

You may be having a depleted entropy issue. By default, dnssec-keygen uses /dev/random as its source of random data for key generation. If, for some reason, demand outstrips supply, the process could appear to hang, while it waits for more numbers.

One solution might be to use /dev/urandom instead. It's a "less random" (and hence easier to generate) source of random data.

July 4th, 2007	#1
jmoe74 First Cup of Ubuntu Join Date: Jan 2007 Beans: 3	generating dnssec keys for a zone I am trying to generate dnssec keys for my zone. When I type the command: dnssec-keygen -a RSA -b 512 -n ZONE myzone.com from my working named directory, it looks like the command is doing something, but it has been running for at least 30 min now. I am wondering if this should take this long or if I am doing something wrong.

July 5th, 2007	#2
kidders Skinny Extra Sweet Ubuntu Join Date: Aug 2006 Location: Dublin IE Beans: 3,181 Ubuntu 8.10 Intrepid Ibex	Re: generating dnssec keys for a zone Hi there, You may be having a depleted entropy issue. By default, dnssec-keygen uses /dev/random as its source of random data for key generation. If, for some reason, demand outstrips supply, the process could appear to hang, while it waits for more numbers. One solution might be to use /dev/urandom instead. It's a "less random" (and hence easier to generate) source of random data.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode