The tag has no wiki summary.

learn more… | top users | synonyms

3
votes
1answer
532 views

Some questions about kernel.random.* parameters

I'm trying to understand the linux kernel parameters which are under /proc/sys/kernel/random/, but I have some troubles. Could you help me figure some things out? What is the boot_id parameter used ...
10
votes
1answer
415 views

How can I detect incidents of entropy depletion?

I recently had my first encounter with a depleted entropy pool, and I was disappointed to learn that none of the usual system logs were helpful in discovering the problem. After installing CUPS on a ...
1
vote
1answer
328 views

Windows server 2008R2: Monitoring the amount of available entropy

Is there any simple way of monitoring the amount of available entropy (random data) on windows? I'm using Windows server 2008R2 and apache+ssl on vmware, and I'm a bit worried about starving the ...
6
votes
2answers
730 views

Do Windows virtual machines suffer from entropy shortage too?

Recently we ran into a problem where one of our Linux-based virtual machines was really slow due to a chronic shortage of "entropy". I'm wondering if Windows virtual machines would suffer from the ...
4
votes
4answers
1k views

Server suddenly running out of entropy

Since a reboot yesterday, one of our virtual servers (Debian Lenny, virtualized with Xen) is constantly running out of entropy, leading to timeouts etc. when trying to connect over SSH / TLS-enabled ...
1
vote
1answer
210 views

ssl handshake - not sure if slow

Is there any tool that would allow me to audit or check if everything is all right concerning my SSL Handshake ? I personally found it is a bit slow, but I really don't know if it's just me. I am ...
8
votes
2answers
530 views

How to tell when an Entropy Key is overloaded?

I have several Entropy Keys with egd in front of them and then all load balanced by haproxy. I then have many client machines using the haproxy service IP as a network source of entropy. I have no ...
1
vote
1answer
204 views

Which password entropy for MS-CHAPv2

I am looking at connecting in a reasonably secured way mobiles to an enterprise WiFi network. The current solutions would be user certificates on the mobiles (they are unfortunately exportable) or ...
6
votes
1answer
644 views

How does Apache interpret multiple SSLRandomSeed sources

In my Apache configuration I have these lines: SSLRandomSeed connect builtin SSLRandomSeed connect file:/dev/random SSLRandomSeed connect file:/dev/urandom 1024 How, exactly, does Apache interpret ...
8
votes
3answers
3k views

Entropy on virtual machines

As you might know that it's not as easy to generate entropy on a virtual machine as on a "normal" pc. Generating a gpg-key on a virtual machine can take a while, even with the correct tools. There ...
5
votes
4answers
7k views

How to fix the entropy pool issue with RHEL 5.x

RHEL 5.x has an entropy-generation problem (held-over from kernel 2.4). Following directions from here has produced little-to-no results: How to increase entropy pool on a 2.6 kernel RHEL/Fedora ...
2
votes
2answers
2k views

Low entropy on CentOS 5 after new mount

I recently mounted a new partition and moved /home and /var/lib/mysql to the new drive and did a symlink to them. Now I've noticed that the entropy (using munin) has dropped from around 3000 to ...
2
votes
1answer
787 views

Distributing entropy to virtual machines

I'm interested in generating secret keys for SSL on virtual machines using true randomness. By true randomness I mean the same level of entropy that can be generated by UNIX's dev/random and entropy ...
2
votes
3answers
2k views

Explain in Plain English about Entropy Available

If I run this command in Ubuntu $ sudo cat /proc/sys/kernel/random/entropy_avail it returns a number that indicates how much "entropy" is available to the kernel, but that's about all I know. What ...
2
votes
3answers
982 views

Feeding the kernels entropy source from other machines and/or increasing its maximum size

We have has a little trouble with a small box that acts as a VPN end-point and mail relay for our network, caused by the available entropy for /dev/random being too low (which causes TLS connection ...
3
votes
3answers
1k views

Munin “Available entropy” when using address space layout randomization

Having just configured Munin for statistics logging on my gentoo server (hardened profile), I am noticing that my "Available entropy" is consitently in the 200-300 range. This seems way to low, so I ...