Summary: | net-print/cups still fails to generate SSL keys | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | Romain Riviere <gentoo> |
Component: | [OLD] Printing | Assignee: | Printing Team <printing> |
Status: | VERIFIED NEEDINFO | ||
Severity: | major | CC: | jakub |
Priority: | High | ||
Version: | unspecified | ||
Hardware: | PPC | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- |
Description
Romain Riviere
2007-07-02 12:30:08 UTC
Uhm? What will hang? Nothing hangs here without any certificates; if you need them, then create them. After a fresh install, when accessing one of the "admin" pages, since the Encryption Required is set as a default, cupsd tries to generate the SSL key & cert. And never manages. The browser hangs, cupsd doesn't do anything, until killed -9. you just have to wait a bit: I [13/Jul/2007:11:51:07 +0200] Listening to 127.0.0.1:631 on fd 2... E [13/Jul/2007:11:51:07 +0200] Unable to open listen socket for address ::1:631 - Address family not supported by protocol. I [13/Jul/2007:11:51:07 +0200] Listening to /var/run/cups/cups.sock on fd 3... I [13/Jul/2007:11:51:41 +0200] Generating SSL server key... I [13/Jul/2007:11:52:23 +0200] Created SSL server key file "/etc/cups/ssl/server.key"... I [13/Jul/2007:11:52:23 +0200] Generating self-signed SSL certificate... I [13/Jul/2007:11:52:23 +0200] Created SSL server certificate file "/etc/cups/ssl/server.crt"... note that is 2 Ghz dualcore so it might take longer for you works perfectly here :) If it does not work for you I need more info on how long you waited and your log messages please. (In reply to comment #3) > note that is 2 Ghz dualcore so it might take longer for you > works perfectly here :) Well it's not that much about raw CPU power but pretty more likely limited by available entropy for most people. cat /proc/sys/kernel/random/entropy_avail (In reply to comment #3) > you just have to wait a bit: > > I [13/Jul/2007:11:51:07 +0200] Listening to 127.0.0.1:631 on fd 2... > E [13/Jul/2007:11:51:07 +0200] Unable to open listen socket for address ::1:631 > - Address family not supported by protocol. > I [13/Jul/2007:11:51:07 +0200] Listening to /var/run/cups/cups.sock on fd 3... > I [13/Jul/2007:11:51:41 +0200] Generating SSL server key... > I [13/Jul/2007:11:52:23 +0200] Created SSL server key file > "/etc/cups/ssl/server.key"... > I [13/Jul/2007:11:52:23 +0200] Generating self-signed SSL certificate... > I [13/Jul/2007:11:52:23 +0200] Created SSL server certificate file > "/etc/cups/ssl/server.crt"... > > note that is 2 Ghz dualcore so it might take longer for you > works perfectly here :) > > If it does not work for you I need more info on how long you waited and your > log messages please. The thing is, if *something* was trying to generate SSL certificates, I would have seen it somewhere in the ps list using CPU resources, right ? But there was no such thing that I could see. layla samba # cat /proc/sys/kernel/random/entropy_avail 2233 I [13/Jul/2007:18:26:10 +0200] Generating SSL server key... I [13/Jul/2007:18:43:29 +0200] Created SSL server key file "/etc/cups/ssl/server.key"... Geez ... I had no idea it would be *that* long. This is on a 1.4GHz PPC ... Perhaps cups could log something about this when creating the SSL certificate ? Like "Generating SSL server key : this could take a long time ..." Or display a page in the meantime ... Thanks for your help :-) |