Jira (PDB-521) Use /dev/urandom instead of /dev/random

[Daniele Sluijters (JIRA)]

Title: Message Title

Daniele Sluijters created an issue   PuppetDB / PDB-521 Use /dev/urandom instead of /dev/random Issue Type: Improvement Affects Versions: 1.6.2, 2.0.0 Assignee: Unassigned Created: 24/Mar/14 12:30 PM Labels: puppetdb Priority: Normal Reporter: Daniele Sluijters We should switch PuppetDB to use /dev/urandom instead of /dev/random This will improve startup times and will help a lot of people running PuppetDB on virtual hardware as it will no longer block while waiting on enough entropy. People are usually scared of /dev/urandom but there's no need for that in this case. urandom is perfectly well suited for most cryptographic operations safe for generating long-lived SSL/GPG/SSH keys: If you are unsure about whether you should use /dev/random or /dev/urandom, then probably you want to use the latter. As a general rule, /dev/urandom should be used for everything except long-lived GPG/SSL/SSH keys. OpenSSL also defaults to using /dev/urandom. Add Comment   This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.