Followup to self:
There's an addition in tcnative 1.1.10:
Author: mturk
Date: Sun Apr 1 22:22:42 2007
New Revision: 524725
URL: http://svn.apache.org/viewvc?view=rev&rev=524725
Log:
In case we don't specify the global randFile use like mod_ssl does with
builtin. This fixes long init on some platforms.
Modified:
tomcat/connectors/trunk/jni/native/src/ssl.c
Modified: tomcat/connectors/trunk/jni/native/src/ssl.c
URL:
http://svn.apache.org/viewvc/tomcat/connectors/trunk/jni/native/src/ssl.c?view=diff&rev=524725&r1=524724&r2=524725
==============================================================================
--- tomcat/connectors/trunk/jni/native/src/ssl.c (original)
+++ tomcat/connectors/trunk/jni/native/src/ssl.c Sun Apr 1 22:22:42 2007
@@ -259,7 +259,7 @@
file = ssl_global_rand_file;
if (file == NULL)
- file = RAND_file_name(buffer, sizeof(buffer));
+ return -1;
else if ((n = RAND_egd(file)) > 0) {
return n;
}
Didn't check, but that might be the difference, concerning respecting
RANDFILE?
Regards,
Rainer
Rainer Jung wrote:
Markus Schönhaber wrote:
Adrian Sutton wrote:
RANDFILE is definitely honored and it does work well setting it as /
dev/urandom. I've restarted Tomcat a number of times and it stayed
fast, plus:
cat /proc/sys/kernel/random/entropy_avail
consistently returns low values. Generating activity. In fact, with
hindsight the times that Tomcat took longest to start were the times
I wasn't doing anything else on the server - but the startup time
was always 5 minutes or more and now it starts in under a minute.
Good to hear. Thanks for trying that.
I'll have to find out why for me the value RANDFILE is set to doesn't
seem to have any effect - or, for that matter, whether it really doesn't
have any effect.
Regards
mks
I'm not sure about it, but didn't Mladen change something in tcnative,
when that problem showed up in tomcat-user? Or maybe he just added an
option as a connector attribute ...
Regards,
Rainer
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
