openssl gendh during make install
HI! Is it really necessary to invoke "openssl gendh" during "make install"? It wastes time on automated build systems, especially when building in VMs for armv6. After installing RPMs one would have to regenerate DH params anyway. Ciao, Michael.
Michael Ströder wrote:
HI!
Is it really necessary to invoke "openssl gendh" during "make install"?
It wastes time on automated build systems, especially when building in VMs for armv6. After installing RPMs one would have to regenerate DH params anyway.
I extend my question to all the stuff done in ./raddb/certs/Makefile during make install: Because everyone should invoke /etc/raddb/certs/bootstrap or similar custom scripts anyway the files are not really used. Or are they used somewhere? Ciao, Michael.
On Feb 19, 2016, at 4:38 AM, Michael Ströder <michael@stroeder.com> wrote:
Is it really necessary to invoke "openssl gendh" during "make install"?
Yes. The basic install process should create all of the certificates necessary to do basic testing.
It wastes time on automated build systems, especially when building in VMs for armv6. After installing RPMs one would have to regenerate DH params anyway.
The Debian and RPM packaging scripts don't create those certificates as part of "make install". So there's no issue there. You can stop those files from being created by doing: $ PACKAGE=yes make install Alan DeKok.
Hi,
The Debian and RPM packaging scripts don't create those certificates as part of "make install". So there's no issue there.
indeed....and the live 'bootstrap method if the files didnt exist' means that the server took too long to start up that EAP was marked as a fail and server crashed out. alan
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Michael Ströder