For Java 8, I believe using file:/dev/urandom is better since it avoids SHA1PRNG and it avoids blocking even when seeding SecureRandom. It simply uses /dev/urandom for everything.
Here is a good article explaining why /dev/urandom is the way to go: http://sockpuppet.org/blog/2014/02/25/safely-generate-random-numbers/ -- Bjorn Danielsson Cuspy Code AB Andy Gumbrecht <[email protected]> wrote: > I've found that this can help: > > CATALINA_OPTS=-Djava.security.egd=file:/dev/./urandom > > Your path might be different, but you get the idea. > > Andy. > > http://www.tomitribe.com - @AndyGeeDe - On a small screen device. > On 17 Jun 2016 19:16, "paulhr" <[email protected]> wrote: > >> Install of haveged fixed the issue. It was even available on dnf. >> >> The other option was audio-entroyd. But I found it to be poorly documented >> and hard to find an audio source to feed the randomness that is needed. >> >> >> *dnf install haveged.* >> >> >> >> >> -- >> View this message in context: >> http://tomee-openejb.979440.n4.nabble.com/Three-minutes-to-perform-one-step-during-startup-tp4678934p4678946.html >> Sent from the TomEE Users mailing list archive at Nabble.com. >>
