Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 3 Apr 2006 12:29:35 -0400
From:      "Scott Ullrich" <sullrich@gmail.com>
To:        "Sam Leffler" <sam@errno.com>
Cc:        "Eric W. Bates" <ericx_lists@vineyard.net>, freebsd-net@freebsd.org
Subject:   Re: hifn errors on console
Message-ID:  <d5992baf0604030929i285f8584nc384a90ec223bb78@mail.gmail.com>
In-Reply-To: <44314957.4020800@errno.com>
References:  <44313943.1060300@vineyard.net> <44314957.4020800@errno.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 4/3/06, Sam Leffler <sam@errno.com> wrote:
> Eric W. Bates wrote:
> > I'm running pfsense (an embedded FreeBSD 6.1) on a wrap2C.  I recently
> > added a Soekris vpn1411 and am now getting infrequent errors:
> >
> > hifn0: rndtest: ones interval 4 failed (382, 251-373)
> > hifn0: rndtest: ones interval 1 failed (2663, 2343-2657)
> > hifn0: rndtest: zeros interval 5 failed (206, 111-201)
> > hifn0: rndtest: ones interval 2 failed (1385, 1135-1365)
> > hifn0: rndtest: zeros interval 3 failed (718, 542-708)
> > hifn0: rndtest: zeros interval 4 failed (243, 251-373)
> > hifn0: rndtest: zeros interval 3 failed (717, 542-708)
> >
> > IPSec works fine.  However, I do not know how to tell whether the hifn
> > is being used.
> >
> > I had no luck with Google.  Can anyone enlighten me?
>
> man rndtest(4).  pfSense has configured the FIPS rng testing module to
> monitor the entropy sent by the h/w to the system prng.  Looks like
>
> sysctl kern.rdntest.verbose=3D0
>
> will turn off console msgs.

Thanks, Sam!   I'll add this to our sysctl.conf.

Scott



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?d5992baf0604030929i285f8584nc384a90ec223bb78>