[Opendnssec-develop] Re: [OpenDNSSEC] #8: softhsm --init -token hangs after entering PINs

[OpenDNSSEC]

#8: softhsm --init -token hangs after entering PINs
---------------------------------+------------------------------------------
Reporter:  mattias at nonetwork.se  |        Owner:  rb        
    Type:  defect                |       Status:  closed    
Priority:  major                 |    Component:  SoftHSM   
 Version:  1.0a1                 |   Resolution:  worksforme
Keywords:                        |  
---------------------------------+------------------------------------------
Changes (by rb):

  * status:  new => closed
  * resolution:  => worksforme


Old description:

> {{{
> [root at gozo ~]# /usr/local/opendnssec/bin/softhsm --init-token --slot 0
> --label OpenDNSSEC
> The SO PIN must have a length between 4 and 255 characters.
> Enter SO PIN:
> The user PIN must have a length between 4 and 255 characters.
> Enter user PIN:
>
> }}}
> process hangs infinitiv
>
> running
>
> {{{
> strace /usr/local/opendnssec/bin/softhsm --init-token --slot 0 --label
> OpenDNSSEC
>
> ...
> lstat64("/proc/kmsg", {st_mode=S_IFREG|0400, st_size=0, ...}) = 0
> open("/proc/kmsg", O_RDONLY|O_NOCTTY)   = 8
> read(8,
>
> }}}
> resolves problem reading /proc/kmsg
>
> SELinux is disabled.
> (Standard 32-bit FC11 system)

New description:

 {{{
 [root at gozo ~]# /usr/local/opendnssec/bin/softhsm --init-token --slot 0
 --label OpenDNSSEC
 The SO PIN must have a length between 4 and 255 characters.
 Enter SO PIN:
 The user PIN must have a length between 4 and 255 characters.
 Enter user PIN:

 }}}
 process hangs infinitiv

 running

 {{{
 strace /usr/local/opendnssec/bin/softhsm --init-token --slot 0 --label
 OpenDNSSEC

 ...
 lstat64("/proc/kmsg", {st_mode=S_IFREG|0400, st_size=0, ...}) = 0
 open("/proc/kmsg", O_RDONLY|O_NOCTTY)   = 8
 read(8,

 }}}
 resolves problem reading /proc/kmsg

 SELinux is disabled.
 (Standard 32-bit FC11 system)

--

Comment:

 The problem was in Botan 1.8.2 and had to do with the polling of entropy.
 Fixed in Botan 1.8.3. Will add this to the documentation.

-- 
Ticket URL: <http://trac.opendnssec.org/ticket/8#comment:1>
OpenDNSSEC <http://www.opendnssec.org/>
OpenDNSSEC