search for: regenerate

...ed Note that this is not the DH parameter generation; that completed on the first run, as documented. This is impacting other processes on the machine, and it seems a bit of a radical change. Is the internal default meant to be this short...? I'm going to attempt to set "ssl_parameters_regenerate" explicitly, but I'd like to stick with builtin defaults wherever possible. (Perhaps this regeneration could also be made a little friendlier on the machine, by forking and using setpriority() to lower the CPU demand of this work from the default nice level of the main daemon.) -- -- To...

...ps://weakdh.org/sysadmin.html >> >> includes altering DH parameters length to 2048, and re-specifying the >> allowable cipher suites - they give their suggestion. > > It looks like there is an error on this page regarding regeneration. In > current dovecots ssl_parameters_regenerate defaults to zero, and this > means regeneration is disabled. The old default was 168 hours (1 week). > The language on http://wiki2.dovecot.org/SSL/DovecotConfiguration is > confusing and could be understood to mean that the current default is > one week. > To enable regeneration you...

Hi, I'm currently trying to troubleshoot what appears to be a very subtle bug (most likely a race condition) in SPTPS that causes state to become corrupted during SPTPS key regeneration. The tinc version currently deployed to my production nodes is git 7ac5263, which is somewhat old (2014-09-06), but I think this is still relevant because the affected code paths haven't really changed

On Sat, May 16, 2015 at 04:53:33PM +0100, Etienne Dechamps wrote: > I believe there is a design flaw in the way SPTPS key regeneration > works, because upon reception of the KEX message the other nodes will > send both KEX and SIG messages at the same time. However, the node > expects SIG to arrive after KEX. Therefore, there is an implicit > assumption that messages won't

Is it possible to regenerate the index files, on other conditions than the mbox file being read? For instance, it would be nice if I could regenerate the index for a specific mbox whenever procmail delivers mail to it. If theres no existing solution, would it be possible to make a small script with something like "nc&qu...

To clear up a question regarding my earlier posting regarding random changes in a vector: Say you have a vector (1, -1, -1, 1, 1, -1). I want each value in the vector to have a probability that it will change signs when this vector is regenerated. For example, probability = 50%. When the vector is regenerated, the first value in the vector (1) has a 50% chance of switching to -1. If I regenerated this vector 10 times, 5 of the times it would switch to -1. Similarly, I need each value in the vector to have this same probability of switc...

>It is not at this point emphasized anywhere, including on weakdh.org, that it is actually of high importance to regenerate your DH parameters frequently. That's not really correct. If you're using a prime of length at least 2048 bits, then the corresponding discrete-log problem is well-beyond the pre-computation ability of the NSA (or anyone else). It is computationally intensive to generate such large prime...

...(which I might add, we love most of the time) imap clients still continue to display the message once they're gone (as we'd expect). However, in this instance it's not what we're after. So my question is, what is the "dovecot recommended" way to force the index cache to regenerate. We really don't want to delete the entire index cache for a particular mailbox as larger mailboxes will then need to unnecessarily regenerate indices on unaffected messages. Many thanks for any tips you can provide. John. -------------- next part -------------- An HTML attachment was sc...

I goofed adding some machines to my domain so now I have to do it all over. I removed the secrets.tdb and MACHINE.SID files, but when I join the domain again, the MACHINE.SID is not regenerated. How do I force them to be correctly regenerated on 2.2.4? Here's what I'm doing: 1. kill smb and winbind 2. delete secrets.tdb and MACHINE.SID 3. remove from NT4 PDC 4. add machine to NT4 PDC 5. smbpasswd -j ..... 6. restart smb and winbind I get the secrets.tdb file back everytime, b...

List, good afternoon, I was reading up on a TLS Diffie Hellman protocol weakness described here https://weakdh.org/sysadmin.html which is similar to the earlier FREAK attack, and can result in downgrade of cipher suites. Part of the solution workaround that the researchers describe for Dovecot here https://weakdh.org/sysadmin.html includes altering DH parameters length to 2048, and

...inet_listener pop3 { | port = 110 | } | inet_listener pop3s { | port = 995 | ssl = yes | } | } | service pop3 { | process_limit = 1024 | } | ssl_cert = </usr/local/etc/c64.shuttle.de.CRT | ssl_key = </usr/local/etc/c64.shuttle.de-dovecot.KEY | ssl_parameters_regenerate = 1 hours | userdb { | driver = passwd | } | verbose_proctitle = yes | protocol lmtp { | mail_plugins = notify quota fts fts_squat | } | protocol lda { | mail_plugins = notify quota fts fts_squat | } | protocol imap { | imap_client_workarounds = delay-newmail tb-extra-mailbox-se...

...gt;>>> includes altering DH parameters length to 2048, and re-specifying the >>>> allowable cipher suites - they give their suggestion. >>> >>> It looks like there is an error on this page regarding regeneration. In >>> current dovecots ssl_parameters_regenerate defaults to zero, and this >>> means regeneration is disabled. The old default was 168 hours (1 week). >>> The language on http://wiki2.dovecot.org/SSL/DovecotConfiguration is >>> confusing and could be understood to mean that the current default is >>> one week....

....html >>> >>> includes altering DH parameters length to 2048, and re-specifying the >>> allowable cipher suites - they give their suggestion. >> >> It looks like there is an error on this page regarding regeneration. In >> current dovecots ssl_parameters_regenerate defaults to zero, and this >> means regeneration is disabled. The old default was 168 hours (1 week). >> The language on http://wiki2.dovecot.org/SSL/DovecotConfiguration is >> confusing and could be understood to mean that the current default is >> one week. >> To ena...

Quick question: How does dovecot keep the message headers index file updated? Eg: if my MDA delivers an extra 10 messages while I'm logged in. How does the message index get updated? At what points is it regenerated? Thanks, Paul

Hello everyone, I'm having problems with DTMF regeneration on my incoming PRI. I see that when the calling party transmits a DTMF digit, it gets generated at my end at a slower rate. Normally this would not be a problem, but several of these calling party are alarm control panels that send DTMF digits at a pretty fast clip and require that the DTMF timing be left intact. I noticed that

This is a patch for the regenerated configure related files. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.llvm.org/pipermail/llvm-dev/attachments/20091013/eb1ed755/attachment.html> -------------- next part -------------- A non-text attachment was scrubbed... Name: haiku.patch Ty...

...n advance for your patience) I''m in the middle of deploying an app, and it _looks_ as though everything is set up properly as far as my routes.rb and whatnot. However, even though I''ve deleted the public/index.html file, whenever I hit the application the index.html file gets regenerated, and it now displays a "you are being redirected" message and a link to the controller I''ve defined in routes.rb. That last part is what makes me think that routes.rb is set up correctly (or close to it); the link in the newly-generated index.html always reflects whatever e...

...been letting me know that the MD5 and SHA1 hashes of /etc/ssh/ssh_known_hosts has been changing regularly as Puppet runs. Now, I''ve not added or changed anything with my ssh keys so I would expect either: a) it sees that the keys haven''t changed and thus doesn''t regenerate the /etc/ssh/ssh_known_hosts file b) it always regenerates the file, but generates it exactly the same every time so the MD5 and SHA1 sums are the same. In actual operation Puppet puts a timestamp in the header of the file and it generates a new file even if none of the keys have actuall...

Thank you for providing excellent tools. I''d like to know about the partial site generation provided by webgen 0.5.2. http://rubyforge.org/forum/forum.php?forum_id=26516 > When a file that was in the menu changed, all files which > included a menu with a link to this file got regenerated, > too. However, that was not always necessary since the content > of the changed file does not appear in the menu, only its meta > information `title`. Therefore the new system checks if the > meta information of the changed file has changed and only then > regenerates all menus. T...

It's apparent I have some level of corruption in my mailboxes - something to do with the combination of mdbox, sis, and zlib. I should note that I know I have a mix of compressed and raw messages - if that makes any difference in identifying the problems. I think I need to somehow regenerate the mailboxes with issues. Is there a suggestion for how to accomplish this? Should I perhaps use dsync to shift to a temporary mail location and then rename it back? If I DO use dsync in this manner, and I have zlib enabled - will this then compress all the messages in the new mail storage? --...