DH parameter generation hanging

Riccardo Veraldi Riccardo.Veraldi at cnaf.infn.it
Mon Mar 14 17:13:27 CET 2011


Hello,

freeradius 2.1.10 here on soekris net5501

radiusd: FreeRADIUS Version 2.1.10, for host i386-unknown-openbsd4.9, 
built on Mar 11 2011 at 11:20:43


the problem is when starting freeradius, it hangs forever when 
generating DH parameters.
Any clue on this problem ?

thank you

Rick


  Module: Instantiating eap-tls
    tls {
         rsa_key_exchange = no
         dh_key_exchange = yes
         rsa_key_length = 512
         dh_key_length = 512
         verify_depth = 0
         CA_path = "/etc/raddb/certs"
         pem_file_type = yes
         private_key_file = "/etc/raddb/certs/server.pem"
         certificate_file = "/etc/raddb/certs/server.pem"
         CA_file = "/etc/raddb/certs/ca.pem"
         private_key_password = "whatever"
         dh_file = "/dev/arandom"
         random_file = "/dev/arandom"
         fragment_size = 1024
         include_length = yes
         check_crl = no
         cipher_list = "DEFAULT"
         make_cert_command = "/etc/raddb/certs/bootstrap"
     cache {
         enable = no
         lifetime = 24
         max_entries = 255
     }
     verify {
     }
    }
Generating DH parameters, 1024 bit long safe prime, generator 2
This is going to take a long time
...............+.................................................................Child 
PID 17850 is taking too much time: forcing failure and killing child.
...............................+...................................+........................+.................................+..+...............................................................+..............+....



More information about the Freeradius-Users mailing list