DH parameter generation hanging
Riccardo Veraldi
Riccardo.Veraldi at cnaf.infn.it
Mon Mar 14 17:13:27 CET 2011
Hello,
freeradius 2.1.10 here on soekris net5501
radiusd: FreeRADIUS Version 2.1.10, for host i386-unknown-openbsd4.9,
built on Mar 11 2011 at 11:20:43
the problem is when starting freeradius, it hangs forever when
generating DH parameters.
Any clue on this problem ?
thank you
Rick
Module: Instantiating eap-tls
tls {
rsa_key_exchange = no
dh_key_exchange = yes
rsa_key_length = 512
dh_key_length = 512
verify_depth = 0
CA_path = "/etc/raddb/certs"
pem_file_type = yes
private_key_file = "/etc/raddb/certs/server.pem"
certificate_file = "/etc/raddb/certs/server.pem"
CA_file = "/etc/raddb/certs/ca.pem"
private_key_password = "whatever"
dh_file = "/dev/arandom"
random_file = "/dev/arandom"
fragment_size = 1024
include_length = yes
check_crl = no
cipher_list = "DEFAULT"
make_cert_command = "/etc/raddb/certs/bootstrap"
cache {
enable = no
lifetime = 24
max_entries = 255
}
verify {
}
}
Generating DH parameters, 1024 bit long safe prime, generator 2
This is going to take a long time
...............+.................................................................Child
PID 17850 is taking too much time: forcing failure and killing child.
...............................+...................................+........................+.................................+..+...............................................................+..............+....
More information about the Freeradius-Users
mailing list