Skip to main content

Questions tagged [entropy-pool]

1 vote
1 answer
3k views

I am having trouble running Solr 9.2 on the above virtual machine (Rhel9.1 on Azure, image from CIS). The problem is low entropy as seen in the logs below: Started Apache Solr 9. Java 17 detected. ...
Obirieni Simeo's user avatar
4 votes
2 answers
5k views

I have a problem with an old laptop. I have installed a debian 11 operating system on it a year ago, and despite using it almost daily to perform network administration, I recently found its available ...
user avatar
3 votes
2 answers
5k views

Whenever I cat /proc/sys/kernel/random/entropy_avail inside my Docker containers (Linux 5.10 based), I get a double-digit result, which is apparently laughably low. Supposedly anything below 4 digits ...
Spiff's user avatar
  • 2,698
2 votes
1 answer
1k views

I tried to gain a bit of understanding about how SSL/TLS works and had a look at the TLS handshake in TLS 1.2 and TLS 1.3, and where random numbers from the server come into play there. Since every ...
Max1's user avatar
  • 123
3 votes
1 answer
208 views

I'm planning to set up periodic checks for system health on a multiple remote systems. To achieve this I've set up key-based authentication to execute scripts on remote side without interaction i.e.: ...
ToastStudios's user avatar
1 vote
2 answers
1k views

The man page for rngd on Linux says -o (/dev/random) is used for random number output while -r (/dev/hwrng) for random number input. What does this mean? How do these device files differ and why are ...
Michael Martinez's user avatar
-3 votes
1 answer
242 views

When no radioactive decay is available and good entropy is strongly advised for security reasons you experience a real problem. HTTPS connections consume a lot of entropy. If you have thousands of ...
Andreas Karatassios-Peios's user avatar
3 votes
1 answer
805 views

I'm trying out coreos on a kubernetes cluster. This setup includes a bind server serving DNSSEC responses. Because of the DNSSEC key management, the bind server uses up all the available entropy and ...
ConnorJC's user avatar
  • 959
2 votes
1 answer
1k views

I'm looking for the method used by EJBCA to generate the private keys in general (CA, Sub-Ca, certificates...). Let say for instance you want RSA 2048 key size. Is the generation process all done in ...
Florent's user avatar
  • 308
1 vote
1 answer
794 views

I am trying to figure out how to install haveged on Cloud Linux. It doesn't seem to be avail in the repo, and trying to a do a make install does not work. My question is: Is haveged compatible with ...
Gordon Snappleweed's user avatar
6 votes
0 answers
701 views

I am thinking my entropy level may be low? $ cat /proc/sys/kernel/random/entropy_avail I am around 132-178 on average. Pool size is default 4096 (this is a container on a virtualizer by the way). I ...
Gordon Snappleweed's user avatar
5 votes
1 answer
7k views

I'm trying to understand the linux kernel parameters which are under /proc/sys/kernel/random/, but I have some troubles. Could you help me figure some things out? What is the boot_id parameter used ...
Mikhail Morfikov's user avatar
12 votes
1 answer
2k views

I recently had my first encounter with a depleted entropy pool, and I was disappointed to learn that none of the usual system logs were helpful in discovering the problem. After installing CUPS on a ...
Nic's user avatar
  • 13.7k
1 vote
1 answer
2k views

Is there any simple way of monitoring the amount of available entropy (random data) on windows? I'm using Windows server 2008R2 and apache+ssl on vmware, and I'm a bit worried about starving the ...
Tommy's user avatar
  • 331
6 votes
2 answers
3k views

Recently we ran into a problem where one of our Linux-based virtual machines was really slow due to a chronic shortage of "entropy". I'm wondering if Windows virtual machines would suffer from the ...
Stephen C's user avatar
  • 551
5 votes
4 answers
5k views

Since a reboot yesterday, one of our virtual servers (Debian Lenny, virtualized with Xen) is constantly running out of entropy, leading to timeouts etc. when trying to connect over SSH / TLS-enabled ...
Creshal's user avatar
  • 257
1 vote
1 answer
307 views

Is there any tool that would allow me to audit or check if everything is all right concerning my SSL Handshake ? I personally found it is a bit slow, but I really don't know if it's just me. I am ...
Pierre-Olivier's user avatar
10 votes
3 answers
806 views

I have several Entropy Keys with egd in front of them and then all load balanced by haproxy. I then have many client machines using the haproxy service IP as a network source of entropy. I have no ...
grifferz's user avatar
  • 988
2 votes
1 answer
787 views

I am looking at connecting in a reasonably secured way mobiles to an enterprise WiFi network. The current solutions would be user certificates on the mobiles (they are unfortunately exportable) or ...
WoJ's user avatar
  • 3,885
7 votes
1 answer
2k views

In my Apache configuration I have these lines: SSLRandomSeed connect builtin SSLRandomSeed connect file:/dev/random SSLRandomSeed connect file:/dev/urandom 1024 How, exactly, does Apache interpret ...
user35042's user avatar
  • 2,781
13 votes
2 answers
13k views

As you might know that it's not as easy to generate entropy on a virtual machine as on a "normal" pc. Generating a gpg-key on a virtual machine can take a while, even with the correct tools. There ...
dbanck's user avatar
  • 423
6 votes
4 answers
14k views

RHEL 5.x has an entropy-generation problem (held-over from kernel 2.4). Following directions from here has produced little-to-no results: How to increase entropy pool on a 2.6 kernel RHEL/Fedora ...
warren's user avatar
  • 19.4k
2 votes
2 answers
2k views

I recently mounted a new partition and moved /home and /var/lib/mysql to the new drive and did a symlink to them. Now I've noticed that the entropy (using munin) has dropped from around 3000 to ...
lamp_scaler's user avatar
3 votes
1 answer
1k views

I'm interested in generating secret keys for SSL on virtual machines using true randomness. By true randomness I mean the same level of entropy that can be generated by UNIX's dev/random and entropy ...
Louis's user avatar
  • 131
42 votes
5 answers
38k views

If I run this command in Ubuntu sudo cat /proc/sys/kernel/random/entropy_avail it returns a number that indicates how much "entropy" is available to the kernel, but that's about all I know. What unit ...
Josh Lindsey's user avatar
2 votes
3 answers
2k views

We have has a little trouble with a small box that acts as a VPN end-point and mail relay for our network, caused by the available entropy for /dev/random being too low (which causes TLS connection ...
David Spillett's user avatar
3 votes
3 answers
2k views

Having just configured Munin for statistics logging on my gentoo server (hardened profile), I am noticing that my "Available entropy" is consitently in the 200-300 range. This seems way to low, so I ...
Simon Lindgren's user avatar