On Fri, 2 Nov 2007, C. Michael Pilato wrote:
> Justin Erenkrantz wrote:
>> On Nov 2, 2007 1:10 AM, Karl Fogel <kfogel@red-bean.com> wrote:
>>> By that time I had forgotten about the random-vs-urandom thing,
>>> though, so I just assumed my tests were taking longer because we had
>>> more tests, or something. Now that I'm specifying /dev/urandom
>>> explicitly, things are fast for me again.
>>
>> I'm much much more curious *why* this affects anything. What is the
>> testsuite/Subversion doing that requires crypto-grade random numbers
>> at all? Is whatever it is really need crypto-secure random, or is it
>> safe to make it insecure? FWIW, APR 1.2+ has an internal PRNG as well
>> - we can explicitly ask for insecure random bytes from it. The only
>> direct call I can find is part of ra_svn's CRAM implementation - but
>> that shouldn't manifest itself via the other ra layers...so what's the
>> culprit here? -- justin
>
> Honestly, I've wondered the same. My recollection is that APR doesn't allow
> one to say "it's okay to use weak encryption" when generating UUIDs, and I
> *think* that UUID generation is the only place we'd be consuming entropy.
> We use UUIDs for repository creation (dump/load), for commit generating
> commit activity names (DAV), for lock token creation, for .subversion/auth
> obfuscation ... other places?
>
Assuming we still need the slow version in production code, could there be
a test-suite option to use the fast one? I it currently taking my RPM
test suite builds 4+? hours to complete the 3x2 tests they are currently
doing. I was thinking of just configuring/building with the fast version,
do the tests, and then rebuilding with the slow version but if there were
test suite options to to this then that would be much better.
--
David Wayne Summers "Linux: Because reboots are for hardware upgrades!"
david_at_summersoft.fay.ar.us PGP Key: http://summersoft.fay.ar.us/~david/pgp.txt
PGP Key fingerprint = 0B44 B118 85CC F4EC 7021 1ED4 1516 5B78 E320 2001
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Fri Nov 2 20:35:04 2007