From mboxrd@z Thu Jan 1 00:00:00 1970 From: Hammami Omar Date: Tue, 3 Mar 2020 13:33:58 +0100 Subject: [Buildroot] SSH server starts too late In-Reply-To: References: <20200221111947.33e4677d@gmx.net> Message-ID: List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: buildroot@busybox.net Hello, My problem is not resolved yet. In fact, I have known that the libopenssl *1.1.1d* use getrandom function in blocking mode. So to disable this I have applied the modification below in *crypto/rand/rand_unix.c* . But my problem is not resolved. In fact, my ssh server starts too late (after ~2 minutes). patch : *# if defined(__linux) && defined(__NR_getrandom) * * - return syscall(__NR_getrandom, buf, buflen, 0); * * + return syscall(__NR_getrandom, buf, buflen, * *GRND_NONBLOCK* *);* Did I miss something ? In fact, I applied this modification because I saw that my ssh server started only if the* nonblocking pool was initialized*. Is it possible that "*OPENSSL_RAND_SEED_GETRANDOM"* is not defined ? *Note :* I am using the openssh version* 8.1p1* Kind regards, Omar Le ven. 21 f?vr. 2020 ? 19:30, Hammami Omar a ?crit : > hello Grant, > > No, I have always the same "/var/ssh_host_rsa_key" > The haveged script was started, I have very high value of entropy (2332) > and the sshd process started too late. > > > Le ven. 21 f?vr. 2020 ? 19:10, Grant Edwards > a ?crit : > >> On 2020-02-21, Hammami Omar wrote: >> >> > By too late, I mean that my ssh server starts ~20 seconds later >> comparing >> > to the normal (Old buildroot version in my case). >> >> Does it generate a new host key each time it starts? >> >> -- >> Grant Edwards grant.b.edwards Yow! Is a tattoo real, >> like >> at a curb or a battleship? >> gmail.com Or are we suffering in >> Safeway? >> >> _______________________________________________ >> buildroot mailing list >> buildroot at busybox.net >> http://lists.busybox.net/mailman/listinfo/buildroot >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: