Authentication Takes Too Long When Using RSA Authentication Agent SDK 8.1.3 for Java on Red Hat

[#1]

Article Number

000033252

Applies To

RSA Product Set : SecurID
RSA Product/Service Type : RSA Authentication Agent SDK
RSA Version/Condition: 8.1 Service Pack 3
Platform : Red Hat Enterprise Linux
O/S Version : 5.x, 6.x
 

Issue

Running the JAVA example AuthUser in debug mode appears to pause at line

[2016-06-03 11:04:44,909] main - CryptoJ.jar is in classpath, using that to invoke Non-FIPS version of JSafe functions

for several seconds or minutes before the execution of the code continues without error.

Cause

This is a known issue to RSA and is related to the random number generator on the Red Hat platform. This is not related to the RSA Authentication Agent SDK for Java configuration but about generating the random number through BSafe which in-turn uses a system resource (/dev/random).

Workaround

The workaround is for the installed JRE(securerandom.source in java.security) on the system to use /dev/urandom.

Alternatively, perform these steps as root on the Red Hat platform:

1. rm /dev/random
2. mknod -m 0644 /dev/random c 1 9

Now, run the example AuthUser to confirm the issue is resolved.

Notes

Other references that cover what is occurring can be found at URL http://bugs.java.com/view_bug.do?bug_id=6708214 & URL http://bugs.java.com/view_bug.do?bug_id=6202721.