In message <SN1PR0201MB1903C61397050AB692025776B01B0@SN1PR0201MB1903.namprd02.p rod.outlook.com>, "Spain, Dr. Jeffry A." writes: > > Install and run haveged... The problem is your system doesn't have > > enough entropy > > This was clearly the problem. I built a new test server with haveged > installed, and the bind9 completed ECDSAP256SHA256 signing in 5 seconds. > I used 9.11.1 this time since it was just released today.
DSA requires random values as part of the signing process. Really all CPU's should have real random number sources built into them and new genuine random values should only be a instruction code away. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: [email protected] _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
