Re: dnssec-keygen is waiting endless...

2010-05-28 Thread Doug Barton
On 05/28/10 13:53, Michelle Konzack wrote: Hello Evan, Am 2010-05-28 18:33:14, hacktest Du folgendes herunter: Operating System is "Debian GNU/Linux 5.0 Lenny" with bind9 in version 1:9.7.0.dfsg.P1-1~bpo50+1 I get the same problem on Ubuntu, which is Debian-based. /dev/random runs out of ent

Re: dnssec-keygen is waiting endless...

2010-05-28 Thread Michelle Konzack
Hello Evan, Am 2010-05-28 18:33:14, hacktest Du folgendes herunter: > > Operating System is "Debian GNU/Linux 5.0 Lenny" with bind9 in version > > 1:9.7.0.dfsg.P1-1~bpo50+1 > > I get the same problem on Ubuntu, which is Debian-based. /dev/random > runs out of entropy rapidly and takes a long tim

Re: dnssec-keygen is waiting endless...

2010-05-28 Thread Casey Deccio
On Fri, May 28, 2010 at 11:25 AM, Michelle Konzack < linux4miche...@tamay-dogan.net> wrote: > > Currently I need to secure my bind9 since I had a massive attack on my > which is the master. Also I have had more then 30 million queries > in less then one week and bind9 has eaten arround 2.4 GByt

Re: dnssec-keygen is waiting endless...

2010-05-28 Thread Michelle Konzack
Hello Casey, Am 2010-05-28 11:15:30, hacktest Du folgendes herunter: > Running 'cat /proc/sys/kernel/random/entropy_avail' should show you what > your available entropy is during the keygen process. It show me a number between 0 and several 100 > There are a variety of things you can do to incre

Re: dnssec-keygen is waiting endless...

2010-05-28 Thread Evan Hunt
> Operating System is "Debian GNU/Linux 5.0 Lenny" with bind9 in version > 1:9.7.0.dfsg.P1-1~bpo50+1 I get the same problem on Ubuntu, which is Debian-based. /dev/random runs out of entropy rapidly and takes a long time to recover. Using "dnssec-keygen -r /dev/urandom" will make it finish much f

RE: dnssec-keygen is waiting endless...

2010-05-28 Thread Jack Tavares
: Friday, May 28, 2010 11:22 AM To: bind-users@lists.isc.org Subject: Re: dnssec-keygen is waiting endless... Hello Jack, Am 2010-05-28 10:36:51, hacktest Du folgendes herunter: > Or it is a chroot jail and it does not have a source of entropy Ehm no... Where must this entrophy be? Tha

Re: dnssec-keygen is waiting endless...

2010-05-28 Thread Michelle Konzack
Hi again, Am 2010-05-28 10:36:51, hacktest Du folgendes herunter: > Or it is a chroot jail and it does not have a source of entropy AFAIK does a chroot give a fals impression bind could be more secure... Currently I need to secure my bind9 since I had a massive attack on my which is the maste

Re: dnssec-keygen is waiting endless...

2010-05-28 Thread Michelle Konzack
Hello Jack, Am 2010-05-28 10:36:51, hacktest Du folgendes herunter: > Or it is a chroot jail and it does not have a source of entropy Ehm no... Where must this entrophy be? Thanks, Greetings and nice Day/Evening Michelle Konzack -- # Debian GNU/Linux Consultant

Re: dnssec-keygen is waiting endless...

2010-05-28 Thread Casey Deccio
On Fri, May 28, 2010 at 10:41 AM, Michelle Konzack < linux4miche...@tamay-dogan.net> wrote: > Hello Paul, > > Am 2010-05-28 12:34:16, hacktest Du folgendes herunter: > > My bet is that this is a VM and you have no entropy. Either generate some > > entropy (eg run in paralel something like: find /

Re: dnssec-keygen is waiting endless...

2010-05-28 Thread Michelle Konzack
Hello Paul, Am 2010-05-28 12:34:16, hacktest Du folgendes herunter: > My bet is that this is a VM and you have no entropy. Either generate some > entropy (eg run in paralel something like: find / -type f | xargs grep > KSdgajkgdaksdga) > or create the keys on real iron instead of a VM. No, this

RE: dnssec-keygen is waiting endless...

2010-05-28 Thread Jack Tavares
: Bind Users Subject: Re: dnssec-keygen is waiting endless... On Fri, 28 May 2010, Michelle Konzack wrote: > Hello *; > > I am retrying to setup DNSSEC but I have a problem with: > >dnssec-keygen -a RSASHA1 b 1024 -n ZONE tamay-dogan.net > > because if I issue the command,

Re: dnssec-keygen is waiting endless...

2010-05-28 Thread Paul Wouters
On Fri, 28 May 2010, Michelle Konzack wrote: Hello *; I am retrying to setup DNSSEC but I have a problem with: dnssec-keygen -a RSASHA1 b 1024 -n ZONE tamay-dogan.net because if I issue the command, it waits forever and nothing happen. What can this be? Operating System is "Debian GNU/Li