Re: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-28 Thread Rainer Jung
On 28.01.2012 00:38, Pid wrote: On 27/01/2012 23:25, Caldarale, Charles R wrote: From: David Rees [mailto:dree...@gmail.com] Subject: Re: TC7 very slow SessionIdGenerator SecureRandom initialization Hmm, yes, the systems I've checked running Java 1.7.0_02 list /dev/urandom

[OT] Re: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-28 Thread Pid
On 28/01/2012 14:23, Rainer Jung wrote: On 28.01.2012 00:38, Pid wrote: On 27/01/2012 23:25, Caldarale, Charles R wrote: From: David Rees [mailto:dree...@gmail.com] Subject: Re: TC7 very slow SessionIdGenerator SecureRandom initialization Hmm, yes, the systems I've checked running Java

TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread David Rees
I've been working on upgrading some Tomcat 5.5 servers to Tomcat 7 since 5.5 will be EOL soon. One thing I noticed on one of my first upgrades is that TC7 can often take a long time to start up due to slow initialization of the SessionIdGenerator - it can take up to nearly 2 minutes! It appears

RE: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread Caldarale, Charles R
From: David Rees [mailto:dree...@gmail.com] Subject: TC7 very slow SessionIdGenerator SecureRandom initialization Google turns up lots of hits which suggest using -Djava.security.egd=file:/dev/./urandom to work around the issue - but I'd rather not give up security for start up speed. I'd

Re: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread Pid
On 27/01/2012 20:23, David Rees wrote: I've been working on upgrading some Tomcat 5.5 servers to Tomcat 7 since 5.5 will be EOL soon. One thing I noticed on one of my first upgrades is that TC7 can often take a long time to start up due to slow initialization of the SessionIdGenerator - it

Re: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread David Rees
On Fri, Jan 27, 2012 at 12:58 PM, Pid p...@pidster.com wrote: On 27/01/2012 20:23, David Rees wrote: Google turns up lots of hits which suggest using -Djava.security.egd=file:/dev/./urandom to work around the issue - but I'd rather not give up security for start up speed. It seems that

RE: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread Caldarale, Charles R
From: David Rees [mailto:dree...@gmail.com] Subject: Re: TC7 very slow SessionIdGenerator SecureRandom initialization Hmm, yes, the systems I've checked running Java 1.7.0_02 list /dev/urandom as the securerandom.source. Unfortunately, there's a misguided part of the JRE that insists it's

Re: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread Pid
On 27/01/2012 23:00, David Rees wrote: On Fri, Jan 27, 2012 at 12:58 PM, Pid p...@pidster.com wrote: On 27/01/2012 20:23, David Rees wrote: Google turns up lots of hits which suggest using -Djava.security.egd=file:/dev/./urandom to work around the issue - but I'd rather not give up security

Re: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread Pid
On 27/01/2012 23:25, Caldarale, Charles R wrote: From: David Rees [mailto:dree...@gmail.com] Subject: Re: TC7 very slow SessionIdGenerator SecureRandom initialization Hmm, yes, the systems I've checked running Java 1.7.0_02 list /dev/urandom as the securerandom.source. Unfortunately

RE: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread Caldarale, Charles R
From: Pid [mailto:p...@pidster.com] Subject: Re: TC7 very slow SessionIdGenerator SecureRandom initialization that's why the setting of /dev/./urandom is important, even though it would seem to be equivalent. So editing the file fixes this, or just using the system property? Good

Re: TC7 very slow SessionIdGenerator SecureRandom initialization

2012-01-27 Thread David Rees
On Fri, Jan 27, 2012 at 3:42 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Pid [mailto:p...@pidster.com] that's why the setting of /dev/./urandom is important, even though it would seem to be equivalent. So editing the file fixes this, or just using the system property?