Thanks Dewitt for the links. These are very useful.
Will check with our kernel team on the instructions/points made in the
given links and will try to find a workaround to resove httpd hanging.
Thanks a lot for your help.
With Regards,
Venkatesh
On Fri, Sep 24, 2021 at 9:57 PM Otis Dewitt - NOAA
I did not find many but here are some notes for Yocto.
1.)
http://ch.ege.io/blog/2015/05/04/using-h-slash-w-randaom-generator-on-odrod-c1-with-yocto/
2.) https://wiki.yoctoproject.org/wiki/Entropy_on_Autobuilders
Thanks,
Otis
On Fri, Sep 24, 2021 at 9:14 AM alchemist vk wrote:
> Thanks Dewitt
Thanks Dewitt for very thorough and insightful explanation. We are using
Yocto packaged linux version with openssl version being OpenSSL 1.1.1k-fips
25 Mar 2021.
With Regards,
Venkatesh
On Fri, Sep 24, 2021 at 12:11 AM Otis Dewitt - NOAA Affiliate
wrote:
> No problem Venkatesh.
>
> No, I don't
No problem Venkatesh.
No, I don't know how to generate entropy in Apache because I think Apache
uses the system entropy.
You can check how many are available via: "cat
/proc/sys/kernel/random/entropy_avail".
Under the system I know of two different packages, one *rngd *and the other
*haveged.*
T
Thanks Dewitt for your inputs.
Will check from system perspective how to generate more entropy and resolve
this issue.
Do you know, how to generate more entropy in system or via apache so that
it can never be deprived of entropy?
With Regards,
Venkatesh
On Thu, Sep 23, 2021 at 8:46 PM Otis Dewit
Hmm I see, I not sure why you did not get this right away when switching
from openssl to openssl-fips because FIPS require a lot of entropy
and if this is on VMWARE, that has very poor entropy unless you use entropy
generator like "*haveged*" or load *virtio_rng *kernel module.
As I said before I a
Thanks *Jon *for openssl command confirmation.
*@ylavik*,
Its linux OS and openssl version is 1.1.1k-fips. I not yet explored
with SSLRandomSeed changes.
Yes, we upgraded openssl few months back to 1.1.1k, but we are seeing
this httpd hangs issue from last month.
*@otis Dewitt*, Since it
I don't think "insufficient entropy" has anything to do with Apache, but
you could try installing "haveged" rpm.
That may solve your problem.
On Wed, Sep 22, 2021 at 2:11 PM alchemist vk wrote:
> Hi All,
> We are using httpd version 2.4.46 and its working fine for a long time.
> But recently, w
On Wed, Sep 22, 2021 at 8:12 PM alchemist vk wrote:
>
> I am pretty sure, we not changed anything related to httpd config for quite a
> time time and have no idea, why this issue started getting manifested now.
Which operating system and openssl version are you using? Did you
upgrade openssl rec
] [users@httpd] Httpd is hanging
intermittently
Thanks John for quick response.
But can you let me know, what should be o/p of this command?
I tried on 2 systems and see below output.
/home/root# openssl rand -hex 8
d2749a6620672899
/home/root#
/home/root# openssl rand -hex 8
d74e404a57e57ae9
/home
>
> john.p.ore...@medtronic.com
>
>
>
> *From:* alchemist vk
> *Sent:* Wednesday, September 22, 2021 2:09 PM
> *To:* users@httpd.apache.org
> *Subject:* [EXTERNAL] [users@httpd] Httpd is hanging intermittently
>
>
>
> Hi All,
>
> We are using httpd version 2.4
Hi
This may be related to an openssl problem
try
openssl rand -hex 8
John Orendt
john.p.ore...@medtronic.com
From: alchemist vk
Sent: Wednesday, September 22, 2021 2:09 PM
To: users@httpd.apache.org
Subject: [EXTERNAL] [users@httpd] Httpd is hanging intermittently
Hi All,
We are using
Hi All,
We are using httpd version 2.4.46 and its working fine for a long time.
But recently, we started seeing an issue where apache hangs indefinitely
even when the system is in idle state.
And when apache hangs, I see below entries in error_log:
[Tue Sep 21 22:05:53.243013 2021] [ssl:warn] [pid
13 matches
Mail list logo
