On Mon, Oct 29, 2018 at 12:28:15AM +0000, Colin Watson wrote: > Reassigning to OpenSSL - could the OpenSSL maintainers please have a > look and advise what's best to do? (See the start of the bug, reporting > a delay of more than one minute in system boot in some cases, mainly > waiting for sshd to start.)
The biggest change related to this is that we know use getrandom()/getentropy() on kernels that have it, so kernels >= 3.17. And the kernel using that interface doesn't return random numbers until it has been initialized. Something should be initializing the kernel with random data from the previous boot. This used to be done by /etc/init.d/urandom, but I'm not sure if that's still used. This should be done as early as possible during the boot not to cause such problems. You should look into when during the boot process the kernel gets this random data. Kurt