use /dev/urandom for DNSSEC key generation, fixes #596, partially reverts #115 (69f0e1d07a)

This commit is contained in:
Joshua Tauberer
2015-11-19 07:00:33 -05:00
parent e8264e9b6a
commit 16d148a8a9
2 changed files with 7 additions and 6 deletions
+1
View File
@@ -63,6 +63,7 @@ apt_install python3 python3-dev python3-pip \
# encryption keys and passwords:
#
# * TLS private key (see `ssl.sh`, which calls `openssl genrsa`)
# * DNSSEC signing keys (see `dns.sh`)
# * our management server's API key (via Python's os.urandom method)
#
# Why /dev/urandom? It's the same as /dev/random, except that it doesn't wait