Took too long to generate dh parameters

Arran Cudbard-Bell a.cudbardb at freeradius.org
Thu Feb 14 19:22:21 CET 2013


On 14 Feb 2013, at 13:05, Brian Candler <B.Candler at pobox.com> wrote:

> (v2.x.x branch)
> 
> Just a minor note when starting up after a fresh make install then
> sbin/radiusd -X
> 
> Generating DH parameters, 1024 bit long safe prime, generator 2
> This is going to take a long time
> ...................................+....................................................................................................................................................+.....................................................+............................+.................................................................................................+.................................................................................................................................................+.......................+.+................................................................................................................+..................................................+........+...........................................................................................................+................................................................................+.....................................................................................+...!
> .........................................................................+............................................................................................................................+............................+.................................+.............................................................................................................................................................................+........+............................................+.......................+..................................................Child PID 24010 (/Users/brian/Build/freeradius/etc/raddb/certs/bootstrap) is taking too much time: forcing failure and killing child.
> rlm_eap: Failed to initialize type tls
> /Users/brian/Build/freeradius/etc/raddb/eap.conf[17]: Instantiation failed for module "eap"
> /Users/brian/Build/freeradius/etc/raddb/sites-enabled/default[310]: Failed to find "eap" in the "modules" section.
> /Users/brian/Build/freeradius/etc/raddb/sites-enabled/default[252]: Errors parsing authenticate section. 
> Brians-MacBook-Air:freeradius $ ...........+..............+...............................................................+...........+.................................+........................................................................................+.....+....................................................................++*++*++*
> unable to write 'random state'
> 
> This is on a Macbook Air i7: not a slovenly machine, but it looks like 10
> seconds isn't enough.
> 
> However on a second run of radiusd it starts OK.

Yeah it's a known issue. IIRC the certs are now generated as part of the installation process in the new build system.

-Arran


More information about the Freeradius-Devel mailing list