Re: openSSL Key generation

From: rbroom@acm.org
Date: 02/06/03

  • Next message: Systems Administrator: "Re: Perl administration for Linux fileserver" 
    Date: Thu, 6 Feb 2003 14:47:25 -0500 (EST)
From: rbroom@acm.org
To: "Leland T. Snyder" <ltsnyder@x3ci.com>

    Leland,

    I might be mistaken, but pulling random data from /dev/urandom will never
    end - you've given openssl a seed of infinite length (or until you stop
    the process).

    If you want urandom data, pull off a chunk into a file and point to that
    with -rand, and/or choose some other files that are unlikely to be
    reproducable.

    Best regards,

    Ralph

    On Tue, 4 Feb 2003, Leland T. Snyder wrote:

    > I'm executing the command to generate a server key according to the RedHat
    > linux manual, my system is as follows:
    >
    > [root@basea1 tmp]# nohup time /usr/bin/openssl genrsa -rand /dev/urandom
    > 1024 > /tmp/server.key &
    > ==========================================================================
    >
    > While the manual says this might take a long time, it has been running all
    > night, are athalon processors slow? or did I phrase my command incorrectly?
    > CPU time is being consumed like crazy.
    >