[dns-operations] Anyone still using a Sun/Oracle SCA6000 with OpenSSL?

Sebastian Castro sebastian at nzrs.net.nz
Mon Aug 13 21:56:17 UTC 2012


On 13/08/12 20:48, Ray Bellis wrote:
> 
> On 13 Aug 2012, at 09:20, Robert Kisteleki <robert at ripe.net> wrote:
> 
>> You should not store the keys inside the device permanently, unless you're
>> absolutely sure you're never going to use more keys than the device can
>> handle in its lifetime. Use the key import/export routines right from the
>> start instead.
> 
> We found that the Linux driver would behave very badly (sometimes even hanging) if you tried to store more than 255 keys.

Agreed, we discarded the idea of using more than 255 keys, when you
create the 256th key, it crashes.

> 
> Ray
> 
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
> 


-- 
Sebastian Castro
DNS Specialist
.nz Registry Services (New Zealand Domain Name Registry Limited)
desk: +64 4 495 2337
mobile: +64 21 400535



More information about the dns-operations mailing list