#5370 Random option in bind8 module depreciated in latest version

[Tim]

I got the error first time when creating dnssec creating keys in Ubuntu 18.04. This is not related to ubuntu version or even ubuntu but instead of the program called version. I have no screenshot of the error message but basically random is depreciated. I qucik fixed it the dirty way as you can see on the screen.

Seems to be that just linux is not enough to use the setting random,

[Ilia]

Hi,

I have no screenshot of the error message but basically random is depreciated.

Hard to believe that the best way of getting most secure cryptographic randomness would ever be depricated!

Your BIND module configuration apparently enforcing it (which is not default). You can set it to /dev/urandom in BIND module configuration, under Zone file options tab.

[Tim]

Hi,

I switched it back to create the error message:
.. creation failed : dnssec-keygen: fatal: The -r option has been deprecated. System random data is always used.

I f I understand this right my way is ok - the other way is to remove the enforce setting and than Webmin does the job? Im using Bind 9.16

[Tim]

Checked the setting. It is /dev/urandom already.

[Ilia]

Oh, okay, the option is deprecated. Here is the patch.

BIND 9.16 is installed by default on Ubuntu 20.04, not 18.04.

My first comment made my awe as I though you meant that /dev/random was deprecated, only after looking at the code it became clear what you mean.

Anyway, thanks for heads up. Appreceate this.

[Tim]

Hello, thank you. I think I installed a higher version of bind on 18.04 already because I used a new feature (maybe I cpmpiled it can't remember). That's maybe why I discovered that on Unbuntu 18.04 already.

Sorry for confusion. I meant the option not the concept of using random numbers.

[Tim]

I have tested it. Does work for me. Ticket can be closed. Thank's again. ;)