Hangs on dnssec-keygen

[witchbutter]

If you try to create a key with a base64 encoded string as the input, the module hangs trying to initialize the key with no meaningful error messages.

Using this stanza:

# this creates a key based on the provided secret
bind::key { 'dynamic-update':
  algorithm => 'hmac-sha512',
  # the secret has to be a generated base64 string
  secret    => 'xxxxxx32randomcharactersxxxxxxxx',
  owner     => 'root',
  group     => 'bind',
}

Results in this message from puppet apply --debug which is where it hangs:

Debug: /Stage[main]/Dnsserver/Bind::Zone[notarealdomain.net]/File[/var/cach/bind/notarealdomain.net/notarealdomain.net]: The container Bind::Zone[notarealdomain.net] will propagate my refresh event
Debug: Exec[dnssec-keygen-notarealdomain.net](provider=posix): Executing '/usr/local/bin/dnssec-init '/var/cache/bind' 'notarealdomain.net'                'notarealdomain.net' '' '/dev/random' ''                'notarealdomain.net''
Debug: Executing with uid=bind: '/usr/local/bin/dnssec-init '/var/cache/bind' 'notarealdomain.net'                'notarealdomain.net' '' '/dev/random' ''                'notarealdomain.net''

This is using Ubuntu 16.04.3