PRNG not seeded, service won't start
Howard, Christopher
Christopher-Howard at utc.edu
Thu Sep 20 18:27:01 UTC 2018
I'm not the only one! Whew, I thought I was losing my mind.
I have rngd and haveged running and there is large pool of entropy and I still can't get newer versions of bind to start. Very frustrating.
-Christopher
On Thu, 2018-09-20 at 20:14 +0200, Reindl Harald wrote:
OK, this is *really* foolish
on a heavily used machine with 2 days uptime, rngd and haveged there is
*for sure* enough random
bind-9.11.4-8.P1.fc28.x86_64 just found on Fedora koji
Sep 20 20:08:17 srv-rhsoft named[988479]:
../../../lib/dns/openssl_link.c:294: fatal error:
Sep 20 20:08:17 srv-rhsoft named[988479]: OpenSSL pseudorandom number
generator cannot be initialized (see the `PRNG not seeded' message in
the OpenSSL FAQ)
Sep 20 20:08:17 srv-rhsoft named[988479]: exiting (due to fatal error in
library)
who the hell does such invasive obviously not proper tested changes in
minor updates?
Am 18.09.18 um 15:44 schrieb Howard, Christopher:
I found that link previously and tried it. It didn't complain about that
not being a valid setting, but it didn't change the outcome. I'm
beginning to believe I may just have to upgrade to CentOS 7. It needs to
be done at some point anyway, I just didn't want to do it now.
-Christopher
On Tue, 2018-09-18 at 09:33 +0100, Tony Finch wrote:
Howard, Christopher <Christopher-Howard at utc.edu<mailto:Christopher-Howard at utc.edu> <mailto:Christopher-Howard at utc.edu<mailto:Christopher-Howard at utc.edu>>> wrote:
Does any one have any ideas of what I'm missing or what I can do to
resolve this (besides upgrading this box to CentOS 7)?
Try setting `random-device "/dev/urandom";` in `named.conf`.
See https://gitlab.isc.org/isc-projects/bind9/commit/24172bd2eeba91441ab1c65d2717b0692309244a
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20180920/4b8fc4eb/attachment.html>
More information about the bind-users
mailing list