New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

VerySecureRandom takes forever to initialize on certain system - make configurable #2

Closed

phax opened this issue Aug 20, 2015 · 1 comment

Assignees

Owner

phax commented Aug 20, 2015

On some Unix derivates in certain cases VerySecureRandom (based on SecureRandom) takes forever to initialize.
https://www.cigital.com/blog/issues-when-using-java-securerandom/ claims that it "there is not enough entropy in the system" it blocks.

As SecureRandom cannot be totally avoided (e.g. https SSLContext), it should at least be configurable that it should only be used when necessary.

phax self-assigned this

Owner Author

phax commented Aug 20, 2015

AS2GlobalSettings provides such a setting in a static way. it is now used in all places where VerySecureRandom was used before.

phax closed this as completed

mreinigjr mentioned this issue

MDN send timing out phax/as2-server#14

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment