Jetty Quickstart with Shib IDP?

[Barry L. Freese]

If you're in a VM, entropy for randomness is notoriously difficult and
thus blocks on /dev/random happen often.  Newer Intel CPUs have RDRAND in
them which can be used as a partial source of entropy for utilities like
RNGD (RNG-tools) which can help out tremendously.  If you don't have
RDRAND, you could still used RNGD to read from /dev/urandom to have it
backfeed into the entropy pool, but this obviously isn't as good.  Even
for physical machines, these methods can be of use if the entropy pool is
low.

	- Barry

On 11/21/16, 12:52 PM, "users on behalf of Cantor, Scott"
<users-bounces at shibboleth.net on behalf of cantor.2 at osu.edu> wrote:

>> Got it!  It's the random number generator.  It's trying to pull a bunch
>>of
>> entropy out of /dev/random.  Not sure if there is a way to prime
>> /dev/random prior to restart, but I did find a way to use /dev/urandom,
>> which is:
>> 
>> -Djava.security.egd=file:/dev/urandom
>> 
>> added to startup script.
>
>I can't believe I keep forgetting this every time it comes up,
>particularly when I had to deal with the same thing.
>
>FWIW, it's obviously very bad for security to use non-blocking PNRG, but
>I honestly don't know what the right solution is. If somebody has one,
>they should post it.
>
>-- Scott
>
>
>-- 
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net