<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<br>
<div class="moz-cite-prefix">On 01-Aug-22 18:29, Grant Taylor wrote:<br>
</div>
<blockquote type="cite"
cite="mid:97e70620-b861-0e10-5d41-cfc8c31a1f9d@spamtrap.tnetconsulting.net">On
8/1/22 4:21 PM, Greg Choules via bind-users wrote:
<br>
<blockquote type="cite">Off the top of my head, could it be this?
<br>
<br>
random-device
<br>
<br>
...
<br>
<br>
BIND will need a good source of randomness for crypto
operations.
<br>
</blockquote>
<br>
Drive by plug: If it is lack of entropy, try installing and
running Haveged. At least as a troubleshooting aid.
<br>
<br>
</blockquote>
<p>Or my favorite: entropybroker + a hardware entropy source (or
two). There are USB keys; I currently use a RPi (cpu has a
hardware source); recent Intel CPUs also have one. If you use
multiple sources, you don't have to worry about one being
defective/compromised...</p>
<pre class="moz-signature" cols="72">Timothe Litt
ACM Distinguished Engineer
--------------------------
This communication may not represent the ACM or my employer's views,
if any, on the matters discussed.
</pre>
<br>
</body>
</html>