Re: WKS server problems

2020-04-07 Thread Brian Minton via Gnupg-users
On 3/23/20 12:52 PM, john doe wrote: > I'll go back to using havege then as I need to generate a gpg key for > testing purposes on this VM. I apologize if I missed it earlier, but where is the VM running?  A lot of hypervisors provide an emulated or pass-through rdrand instruction, or

Re: WKS server problems

2020-03-23 Thread Andrew Gallagher
On 23/03/2020 16:52, john doe wrote: > I thought that 'only-urandom' could be used as an replacement of haveged > on this Stretch VM, looks like I misunderstood when to use this option. Try it anyway, debian often backport newer features if they have security implications (dkg should be able to

Re: WKS server problems

2020-03-23 Thread john doe
On 3/23/2020 5:21 PM, Andrew Gallagher wrote: > On 23/03/2020 15:58, john doe wrote: >> $ gpg --version >> gpg (GnuPG) 2.1.18 >> libgcrypt 1.7.6-beta >> >> Is it not working because of a too old release? > > Yes, that's FAR too old. :-) You need to dist-upgrade to buster. > I'll go back to using

Re: WKS server problems

2020-03-23 Thread Andrew Gallagher
On 23/03/2020 15:58, john doe wrote: > $ gpg --version > gpg (GnuPG) 2.1.18 > libgcrypt 1.7.6-beta > > Is it not working because of a too old release? Yes, that's FAR too old. :-) You need to dist-upgrade to buster. -- Andrew Gallagher signature.asc Description: OpenPGP digital signature

Re: WKS server problems

2020-03-23 Thread john doe
On 3/23/2020 1:01 PM, Werner Koch wrote: > On Mon, 23 Mar 2020 10:16, john doe said: > >> Thank you Werner, I wrapped the above as an one liner: > > This is even easier. > > $ mkdir -p /etc/gcrypt && echo only-urandom>/etc/gcrypt/random.conf > > The '#' lines are merely comments to show which

Re: WKS server problems

2020-03-23 Thread Werner Koch via Gnupg-users
On Mon, 23 Mar 2020 10:16, john doe said: > Thank you Werner, I wrapped the above as an one liner: This is even easier. $ mkdir -p /etc/gcrypt && echo only-urandom>/etc/gcrypt/random.conf The '#' lines are merely comments to show which other options are available. Shalom-Salam, Werner

Re: WKS server problems

2020-03-23 Thread john doe
On 3/22/2020 8:55 PM, Werner Koch via Gnupg-users wrote: > On Sun, 22 Mar 2020 12:36, Andrew Gallagher said: >> On 22/03/2020 05:38, john doe wrote: >>> Do you have enough entropy on the VM? >> >> Argh, thank you. I thought I had enough entropy because monkeysphere >> created its trust root

Re: WKS server problems

2020-03-23 Thread Andrew Gallagher
On 22/03/2020 19:55, Werner Koch wrote: > You might be better off using this: ... > instead if the very brittle and CPU dependent haveged. Thanks, Werner! That seems to work. -- Andrew Gallagher signature.asc Description: OpenPGP digital signature

Re: WKS server problems

2020-03-22 Thread Werner Koch via Gnupg-users
On Sun, 22 Mar 2020 12:36, Andrew Gallagher said: > On 22/03/2020 05:38, john doe wrote: >> Do you have enough entropy on the VM? > > Argh, thank you. I thought I had enough entropy because monkeysphere > created its trust root without issue, but installing haveged did fix the > problem. You

Re: WKS server problems

2020-03-22 Thread Andrew Gallagher
On 22/03/2020 03:17, Phil Pennock wrote: > On 2020-03-21 at 23:30 +, Andrew Gallagher wrote: >> I'm trying to follow the WKS instructions from the wiki[1] on a remote >> VM, but it hangs at the key generation stage: > [...] >> gpg (GnuPG) 2.2.4 > > Is this a newly created VM? Can you not use

Re: WKS server problems

2020-03-22 Thread Andrew Gallagher
On 22/03/2020 05:38, john doe wrote: > Do you have enough entropy on the VM? Argh, thank you. I thought I had enough entropy because monkeysphere created its trust root without issue, but installing haveged did fix the problem. Rule of thumb, don't debug systems at 11pm... -- Andrew Gallagher

Re: WKS server problems

2020-03-21 Thread john doe
On 3/22/2020 12:30 AM, Andrew Gallagher wrote: > Hi, all. > > I'm trying to follow the WKS instructions from the wiki[1] on a remote > VM, but it hangs at the key generation stage: > > ``` > key-submission@keys1:~$ gpg --passphrase '' --batch --quick-gen-key > "$SUBMISSION_ADDRESS" > > > ^C > gpg:

Re: WKS server problems

2020-03-21 Thread Phil Pennock via Gnupg-users
On 2020-03-21 at 23:30 +, Andrew Gallagher wrote: > I'm trying to follow the WKS instructions from the wiki[1] on a remote > VM, but it hangs at the key generation stage: [...] > gpg (GnuPG) 2.2.4 Is this a newly created VM? Can you not use the opportunity of "nothing else on the system

WKS server problems

2020-03-21 Thread Andrew Gallagher
Hi, all. I'm trying to follow the WKS instructions from the wiki[1] on a remote VM, but it hangs at the key generation stage: ``` key-submission@keys1:~$ gpg --passphrase '' --batch --quick-gen-key "$SUBMISSION_ADDRESS" ^C gpg: signal Interrupt caught ... exiting ``` There are no rogue