[fix] Improve dnssec key generation on low entropy devices

See https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/963368
This commit is contained in:
opi 2016-12-04 15:32:34 +01:00 committed by GitHub
parent f43750b4d6
commit c2065f0a72

View file

@ -95,7 +95,7 @@ def dyndns_subscribe(subscribe_host="dyndns.yunohost.org", domain=None, key=None
logger.info(m18n.n('dyndns_key_generating'))
os.system('cd /etc/yunohost/dyndns && ' \
'dnssec-keygen -a hmac-md5 -b 128 -n USER %s' % domain)
'dnssec-keygen -a hmac-md5 -b 128 -r /dev/urandom -n USER %s' % domain)
os.system('chmod 600 /etc/yunohost/dyndns/*.key /etc/yunohost/dyndns/*.private')
key_file = glob.glob('/etc/yunohost/dyndns/*.key')[0]