search

pki-bot / pki-issues-final

0 stars 0 forks source link

Pkispawn takes exceptionally long time for configuring subsystems #1703

Closed pki-bot closed 3 years ago

pki-bot commented 3 years ago

This issue was migrated from Pagure Issue #1715. Originally filed by gkapoor (@geetikakay) on 2016-01-06 18:32:56:

While configuring subsystems(with ECC) using pkispawn it takes large amount of time. For installing KRA, it took 18 minutes nearly and for other subsystems also it is taking long time.

KRA

<code snip>

2016-01-05 04:04:09 pkispawn    : INFO     ....... rm -f
/opt/FoobarKRA1/kra/alias/noise
2016-01-05 04:04:09 pkispawn    : INFO     ....... BtoA
/opt/FoobarKRA1/kra/alias/admin_pkcs10.bin
/opt/FoobarKRA1/kra/alias/admin_pkcs10.bin.asc
2016-01-05 04:04:09 pkispawn    : INFO     ....... configuring PKI
configuration data.
2016-01-05 04:22:42 pkispawn    : DEBUG    ....... status: 0
2016-01-05 04:22:42 pkispawn    : DEBUG    ....... tag: transport
2016-01-05 04:22:42 pkispawn    : DEBUG    ....... cert

</code snip>

OCSP

<code snip>

2016-01-05 04:23:43 pkispawn    : INFO     ....... rm -f
/opt/FoobarOCSP/ocsp/alias/noise
2016-01-05 04:23:43 pkispawn    : INFO     ....... BtoA
/opt/FoobarOCSP/ocsp/alias/admin_pkcs10.bin
/opt/FoobarOCSP/ocsp/alias/admin_pkcs10.bin.asc
2016-01-05 04:23:43 pkispawn    : INFO     ....... configuring PKI
configuration data.
2016-01-05 04:35:17 pkispawn    : DEBUG    ....... status: 0
2016-01-05 04:35:17 pkispawn    : DEBUG    ....... tag: signing
2016-01-05 04:35:17 pkispawn    : DEBUG    ....... cert:

</code snip>

Steps to Reproduce:

1.Use the configuration file attached
2.use pkispawn in silent mode and install all subsystems.
3.Monitor logs and timestamp to see how much time it took.

Actual results:

Installation is very slow.Takes sometimes 35 minutes also.

Expected results:

Installation of subsystems should be quicker

Additional Information:

The logs and cfg files used are attached to the associated bug.
pki-bot commented 3 years ago

Comment from mharmsen (@mharmsen) at 2016-01-18 20:53:12

The issue turned out to be a lack of entropy on a VM.

This was addressed by using haveged as a work-around.

pki-bot commented 3 years ago

Comment from gkapoor (@geetikakay) at 2017-02-27 14:08:45

Metadata Update from @geetikakay: