dnssec-keygen not responding

Alan Clegg alan at clegg.com
Wed Nov 30 05:18:04 UTC 2011


On 11/30/2011 12:15 AM, vishesh kumar wrote:
> Hi All
> 
> I am trying to generate keys for signing vishesh.com
> <http://vishesh.com> domain using following command (for testing purpose)
> 
> dnssec-keygen -a RSASHA1 -b 768 -n ZONE vishesh.com <http://vishesh.com>.
> 
> But its not responding , i waited around 30 minutes but there is no result
> 
> Operating system is RHEL6 on VirtualBox 4.1

You don't have enough entropy in the virtual environment.  You can (if
you understand the issues surrounding it), use /dev/urandom as your
random source, or look at installing something like haveged
(http://freecode.com/projects/haveged) to solve the problem.

AlanC
-- 
alan at clegg.com | aclegg at infoblox.com
          1.919.355.8851

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20111130/c8ab3bf7/attachment.bin>


More information about the bind-users mailing list