Hello, freeradius 2.1.10 here on soekris net5501 radiusd: FreeRADIUS Version 2.1.10, for host i386-unknown-openbsd4.9, built on Mar 11 2011 at 11:20:43 the problem is when starting freeradius, it hangs forever when generating DH parameters. Any clue on this problem ? thank you Rick Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 CA_path = "/etc/raddb/certs" pem_file_type = yes private_key_file = "/etc/raddb/certs/server.pem" certificate_file = "/etc/raddb/certs/server.pem" CA_file = "/etc/raddb/certs/ca.pem" private_key_password = "whatever" dh_file = "/dev/arandom" random_file = "/dev/arandom" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" make_cert_command = "/etc/raddb/certs/bootstrap" cache { enable = no lifetime = 24 max_entries = 255 } verify { } } Generating DH parameters, 1024 bit long safe prime, generator 2 This is going to take a long time ...............+.................................................................Child PID 17850 is taking too much time: forcing failure and killing child. ...............................+...................................+........................+.................................+..+...............................................................+..............+....
On 3/14/11 6:14 PM, Alan DeKok wrote:
Riccardo Veraldi wrote:
the problem is when starting freeradius, it hangs forever when generating DH parameters. Any clue on this problem ? $ cd /etc/raddb/certs $ ./bootstrap
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html the certificate where generated by me and not with bootstrap... anyway after a while... it worked out. soekris does not have a so fast CPU.
thank you
participants (2)
-
Alan DeKok -
Riccardo Veraldi