-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Markus,

On 10/25/17 10:53 AM, i...@flyingfischer.ch wrote:
> 
>> 
>> Yes, it's the SecureRandom initialization that is killing you.
>> Being a virtual server, it likely has no direct source of true
>> randomness so it needs to pull from whatever the hypervisor is
>> willing to provide.
>> 
>> You'll need to ask your virtualization vendor for how to get
>> access to more entropy, or switch to a less-secure random source
>> (e.g. /dev/urandom on *NIX-like systems).
>> 
> Install haveged and your boot up problems will be gone.

This /might/ be bad advice. Since this is a virtualized environment,
the "hardware events" are all hand-wavy fictional kinds of things. So
the dubious nature of haveged is then further blurred by the effects
of not having direct hardware access.

YMMV

- From the man page: "The output of the HAVEGE random number generator
should be verified on any installation before the haveged is put into
production."

Good advice.

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlnx4+UACgkQHPApP6U8
pFh14w//S4uI34pfkeqfpLOen/3v491a8vI3UB7Fvng461RKgZZzKFOTZOJSWJzo
dOI70IsO9oQklaJm8PBgExoaEHuBOIjNUI/CH4QH2PUBNyOZhDe4st89CMJvkEik
M3Gig/try50dVuNKY3Fwt+xmViqRorr9iVfa+c0yy/vRM6gOy74dnU37Jmcc3e6B
4oJ5TRT4oO6saKQFQxAm3NYk+xcBs+dkkqC/bT6cP9OrnKoDoCKqyTomxGb0k5zx
a2y4Lx3+DaMfC1hQw55AwTfy9XL81hQk+X8kEakccUMonxXqThRrVFbfORBAogHc
ntClV+N0m/b5ujUZubauk7c2VIdmF1x6GBJeBpHm1ALOoOv6IYc6Mm3XeeoS2X1/
5o1O+x1QKWqAPlArF1ny3QPJ0ycnHynu3GgehdRdkgN5FRDGyaCo/k19h0rk5c0r
3urDZBIbxDNwYFO6kdeL9Xzzr1WLjtU0c53nWmAFj4Vw/GHUR1fqT9G4FDeEIgqE
+YLBn2rmULmUFRIwIjj7J/w5ZT6bGMb2edxT6bDwyDjEbbFyq/gegyDIyQBwcGOL
zlSQ0RrTVO25QQxEEa24HIo/9wvw3xaRYdvMidGdbeD2dsMnhbtz2OKCFsnbTVJn
X4ilvpMwP1zPTGZf9kzyh4qV4uonGMzVYOGrtGzK34VLRvCF4VE=
=fSwK
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to