patches to make bind9 with TKEY/GSS updates easier to configure

Michael Graff mgraff at isc.org
Fri Dec 3 07:49:25 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I found my problem.  The binary files for the ccache and keytab were not
generated when applying the patch.

With those three files in place, the test passes, as long as I also do
- --with-randomdev=/dev/urandom

If I leave it to use /dev/random, it runs very, very slowly.

I don't think we can "fix" this as it was likely already broken.  Do
people just use /dev/urandom and pray, or do most people have hardware
assisted RNGs these days and I'm just behind the times?

- --Michael

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkz4oQUACgkQLdqv0r6eD6Ye2gCdFdZHDV5vIyb+ln2WQhCrtntC
tm8AniwqqK98AAmwHzkRZvgVmIcEjgB1
=WbNk
-----END PGP SIGNATURE-----



More information about the bind-workers mailing list