[OT] Re: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-28 Thread Pid
On 28/01/2012 14:23, Rainer Jung wrote: > On 28.01.2012 00:38, Pid wrote: >> On 27/01/2012 23:25, Caldarale, Charles R wrote: >>>> From: David Rees [mailto:dree...@gmail.com] >>>> Subject: Re: TC7 very slow SessionIdGenerator SecureRandom >>>> initi

Re: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-28 Thread Rainer Jung
On 28.01.2012 00:38, Pid wrote: On 27/01/2012 23:25, Caldarale, Charles R wrote: From: David Rees [mailto:dree...@gmail.com] Subject: Re: TC7 very slow SessionIdGenerator SecureRandom initialization Hmm, yes, the systems I've checked running Java 1.7.0_02 list /dev/urandom a

Re: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread David Rees
On Fri, Jan 27, 2012 at 3:42 PM, Caldarale, Charles R wrote: >> From: Pid [mailto:p...@pidster.com] >> > that's why the setting of /dev/./urandom is important, even >> > though it would seem to be equivalent. > >> So editing the file fixes this, or just using the system property? > > Good question

RE: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread Caldarale, Charles R
> From: Pid [mailto:p...@pidster.com] > Subject: Re: TC7 very slow SessionIdGenerator SecureRandom initialization > > that's why the setting of /dev/./urandom is important, even > > though it would seem to be equivalent. > So editing the file fixes this, or just

Re: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread Pid
On 27/01/2012 23:25, Caldarale, Charles R wrote: >> From: David Rees [mailto:dree...@gmail.com] >> Subject: Re: TC7 very slow SessionIdGenerator SecureRandom initialization > >> Hmm, yes, the systems I've checked running Java 1.7.0_02 list >> /dev/ur

Re: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread Pid
On 27/01/2012 23:00, David Rees wrote: > On Fri, Jan 27, 2012 at 12:58 PM, Pid wrote: >> On 27/01/2012 20:23, David Rees wrote: >>> Google turns up lots of hits which suggest using >>> -Djava.security.egd=file:/dev/./urandom to work around the issue - but >>> I'd rather not give up security for st

RE: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread Caldarale, Charles R
> From: David Rees [mailto:dree...@gmail.com] > Subject: Re: TC7 very slow SessionIdGenerator SecureRandom initialization > Hmm, yes, the systems I've checked running Java 1.7.0_02 list > /dev/urandom as the securerandom.source. Unfortunately, there's a misguided part o

Re: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread David Rees
On Fri, Jan 27, 2012 at 12:58 PM, Pid wrote: > On 27/01/2012 20:23, David Rees wrote: >> Google turns up lots of hits which suggest using >> -Djava.security.egd=file:/dev/./urandom to work around the issue - but >> I'd rather not give up security for start up speed. >> >> It seems that something o

Re: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread Pid
On 27/01/2012 20:23, David Rees wrote: > I've been working on upgrading some Tomcat 5.5 servers to Tomcat 7 > since 5.5 will be EOL soon. > > One thing I noticed on one of my first upgrades is that TC7 can often > take a long time to start up due to slow initialization of the > SessionIdGenerator

RE: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread Caldarale, Charles R
> From: David Rees [mailto:dree...@gmail.com] > Subject: TC7 very slow SessionIdGenerator SecureRandom initialization > Google turns up lots of hits which suggest using > -Djava.security.egd=file:/dev/./urandom to work around the issue - but > I'd rather not give up securit

TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread David Rees
I've been working on upgrading some Tomcat 5.5 servers to Tomcat 7 since 5.5 will be EOL soon. One thing I noticed on one of my first upgrades is that TC7 can often take a long time to start up due to slow initialization of the SessionIdGenerator - it can take up to nearly 2 minutes! It appears t