Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 127288 - Openswan-2.4.4 hangs when you try to generate a host key
Summary: Openswan-2.4.4 hangs when you try to generate a host key
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Other
: High normal (vote)
Assignee: Alin Năstac (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-03-23 04:00 UTC by Richard Scott
Modified: 2006-12-07 09:43 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Richard Scott 2006-03-23 04:00:28 UTC
When you run the /etc/init.d/ipsec after installing Openswan-2.4.4 it tries to create the /etc/ipsec/ipsec.secrets file if its not there and the system blocks.

You can CTRL+C out of it and then you are able to make this file by hand with the following command:

# ipsec newhostkey --output /etc/ipsec/ipsec.secrets --bits 2048

However, this command *always* blocks as there is not enough entropy available from /dev/random to complete the command.

I have found a fix at http://gentoo-wiki.com/HOWTO_OpenSwan_2.6_kernel which is as follows:

Edit /usr/libexec/ipsec/newhostkey and change line 60:

ipsec rsasigkey $verbose $host $bits

to

ipsec rsasigkey $verbose --random /dev/urandom $host $bits

Once I have patched this file, everything seems to work :-)

Hope this helps and might be included in the next release.
Comment 1 Alin Năstac (RETIRED) gentoo-dev 2006-12-06 12:10:33 UTC
I've assumed the maintainer position. 
Comment 2 Alin Năstac (RETIRED) gentoo-dev 2006-12-07 09:43:33 UTC
This could potentially increase chances of someone to guess your key.
Close as WONTFIX. Better safe than sorry.