patches to make bind9 with TKEY/GSS updates easier to configure

tridge at samba.org tridge at samba.org
Fri Dec 3 09:49:42 UTC 2010


Hi Michael,

 > With those three files in place, the test passes, as long as I also do
 > - --with-randomdev=/dev/urandom
 > 
 > If I leave it to use /dev/random, it runs very, very slowly.

I tried without --with-randomdev=/dev/urandom and it is a bit slow. I
also tried using the RANDFILE and using -R /dev/urandom to nsupdate,
and it's still using /dev/random. 

 > I don't think we can "fix" this as it was likely already broken.  Do
 > people just use /dev/urandom and pray, or do most people have hardware
 > assisted RNGs these days and I'm just behind the times?

As a developer I tend to use /dev/urandom. I don't know what people do
in production. 

Cheers, Tridge



More information about the bind-workers mailing list