Users unable to access the system via SSH due to insufficient entropy

Solution Verified - Updated -

Issue

  • The server is running, but SSH connection attempts are hanging due to insufficient entropy:
SSH Client:

# ping -c2 test.example.com
PING test.example.com (10.0.0.34) 56(84) bytes of data.
64 bytes from 10.0.0.34: icmp_seq=1 ttl=60 time=50.2 ms
64 bytes from 10.0.0.34: icmp_seq=2 ttl=60 time=58.6 ms

--- test.example.com ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 50.176/54.403/58.631/4.227 ms

# ssh 10.0.0.34 -v
OpenSSH_9.0p1, OpenSSL 3.0.9 30 May 2023
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Reading configuration data /etc/ssh/ssh_config.d/50-redhat.conf
debug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config
..
debug1: Connection established.
debug1: Local version string SSH-2.0-OpenSSH_9.0
(connection hangs)

SSH Server:

# for i in `pidof sshd` ; do egrep "Name|^Pid" /proc/$i/status ; cat /proc/$i/stack ; done
Name:   sshd
Pid:    30133
[<0>] _random_read.part.30+0x314/0x390
[<0>] do_syscall_64+0x5b/0x1a0
[<0>] entry_SYSCALL_64_after_hwframe+0x66/0xcb

Environment

  • Red Hat Enterpirse Linux 8
  • VMware virtual machine
  • rngd

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content