similar to: Is this assumption correct?

On March 23, 2019 12:39:13 PM GMT+01:00, Tobi via dovecot <dovecot at dovecot.org> wrote: >Hello list > >we encounter a weird SSL issue with one of our dovecot (2.2.24 on >Centos6) which we can only explain if our assumtion is correct >Symptoms are that imaps connections (on port 993) suddenly get veeeery >slow. Up to 180s for one connection with openssl s_client The thing

I am use to low random entropy on my arm boards, not an intel. On my Lenovo x120e, cat /proc/sys/kernel/random/entropy_avail reports 3190 bits of entropy. On my armv7 with Centos7 I would get 130 unless I installed rng-tools and then I get ~1300. SSH into one and it drops back to 30! for a few minutes. Sigh. Anyway on my new Zotac nano ad12 with an AMD E-1800 duo core, I am seeing 180.

On 05/26/2017 08:35 PM, Leon Fauster wrote: >> Am 27.05.2017 um 01:09 schrieb Robert Moskowitz <rgm at htt-consult.com>: >> >> I am use to low random entropy on my arm boards, not an intel. >> >> On my Lenovo x120e, >> >> cat /proc/sys/kernel/random/entropy_avail >> >> reports 3190 bits of entropy. >> >> On my armv7 with

Hi, from time to time the IMAP login times out ... my external monitoring says "connection reset by peer (SSL)" and Thunderbird tries to connect forever. After a short while everything returns back to normal operation. The system resources are plenty, there are no error messages and no greedy background tasks running. I read a little about tweaking imap-login - but all the default

Hello list we encounter a weird SSL issue with one of our dovecot (2.2.24 on Centos6) which we can only explain if our assumtion is correct :-) Symptoms are that imaps connections (on port 993) suddenly get veeeery slow. Up to 180s for one connection with openssl s_client The thing we do not understand is that in the same time imap connections with starttls are just 1s. We can see that entropy on

On 05/28/2017 04:24 AM, Tony Mountifield wrote: > In article <792718e8-f403-1dea-367d-977b157af82c at htt-consult.com>, > Robert Moskowitz <rgm at htt-consult.com> wrote: >> >> On 05/26/2017 08:35 PM, Leon Fauster wrote: >>>> Am 27.05.2017 um 01:09 schrieb Robert Moskowitz <rgm at htt-consult.com>: >>>> >>>> I am use to low

Hello. I'm a distro maintainer and was wondering about the efficacy of entropy daemons like haveged and jitterentropyd in qemu-kvm. One of the authors of haveged [0] pointed out if the hardware cycles counter is emulated and deterministic, and thus predictible. He therefore does not recommend using HAVEGE on those systems. Is this the case with KVM's counters? PS. I will be setting VM CPU

On 28/05/17 23:56, Leon Fauster wrote: >> Am 28.05.2017 um 12:16 schrieb Robert Moskowitz <rgm at htt-consult.com>: >> >> >> >> On 05/28/2017 04:24 AM, Tony Mountifield wrote: >>> In article <792718e8-f403-1dea-367d-977b157af82c at htt-consult.com>, >>> Robert Moskowitz <rgm at htt-consult.com> wrote: >>>> On 05/26/2017

This problem came about when I noticed exim, on a domU, holding mail in its queue for days before delivering. After a bit of debugging then I found gnutls was taking ages to calculate its keys. So disabled TLS in exim and works fine. Then I had another xen domU doing exactly the same thing so I did some more digging and came up with this post:

On 29/05/17 15:46, Robert Moskowitz wrote: > > > On 05/28/2017 06:57 PM, Rob Kampen wrote: >> On 28/05/17 23:56, Leon Fauster wrote: >>>> Am 28.05.2017 um 12:16 schrieb Robert Moskowitz <rgm at htt-consult.com>: >>>> >>>> >>>> >>>> On 05/28/2017 04:24 AM, Tony Mountifield wrote: >>>>> In article

Hi, We''re trying to rewrite veeeery old Rails app that we successfully managed to move to 1.2.6 and now we''re trying with 2.1.0. One of the problems is caused by :include in AR.find. Rails 1.2.6 generates totally different SQL query than 2.1.0. Here''s Rails find query and generated SQL queries: Foo.find(:all, :include => :ticket, :conditions =>

> On 05 March 2019 at 18:51 William Taylor via dovecot <dovecot at dovecot.org> wrote: > > > On Tue, Mar 05, 2019 at 05:39:28PM +0100, Axel Burri via dovecot wrote: > > Hello > > > > When booting from a slow machine, I can observe dovecot blocking the > > whole boot process. I traced it down to the getrandom() system call in > > lib/randgen.c,

Hi, [Steffen Kaiser] - [2016-07-26 09:05] >>>> I am running a dovecot server and have set up an external >>>> monitoring, where every five minutes a login with SSL on port >>>> 993 is done. I usually get once a day an error "connection >>>> reset by peer - SSL connect", which goes away until the next >>>> monitor is executed.

Martin Kletzander: > On Fri, Aug 10, 2018 at 08:33:00PM +0000, procmem wrote: >> Hello. I'm a distro maintainer and was wondering about the efficacy of >> entropy daemons like haveged and jitterentropyd in qemu-kvm. One of the >> authors of haveged [0] pointed out if the hardware cycles counter is >> emulated and deterministic, and thus predictible. He therefore does

> Am 29.05.2017 um 05:46 schrieb Robert Moskowitz <rgm at htt-consult.com>: > > > > On 05/28/2017 06:57 PM, Rob Kampen wrote: >> On 28/05/17 23:56, Leon Fauster wrote: >>>> Am 28.05.2017 um 12:16 schrieb Robert Moskowitz <rgm at htt-consult.com>: >>>> >>>> >>>> >>>> On 05/28/2017 04:24 AM, Tony

Hello When booting from a slow machine, I can observe dovecot blocking the whole boot process. I traced it down to the getrandom() system call in lib/randgen.c, which blocks until the random number generator is initialized (dmesg "random: crng init done"). This can take up to three minutes (!) on my machine, as there is not much entropy available (no hardware RNG, network VPN is also

> Am 29.05.2017 um 14:41 schrieb Robert Moskowitz <rgm at htt-consult.com>: > > > > On 05/29/2017 06:46 AM, Leon Fauster wrote: >>> Am 29.05.2017 um 05:46 schrieb Robert Moskowitz <rgm at htt-consult.com>: >>> >>> >>> >>> On 05/28/2017 06:57 PM, Rob Kampen wrote: >>>> On 28/05/17 23:56, Leon Fauster wrote:

On 2019-03-08 18:40, Stephan Bosch via dovecot wrote: > Since you're compiling it anyway, maybe you should first try to increase > the CLIENT_PROGRESS_TIMEOUT in src/lib-http/test-http-payload.c. It is > currently 10 seconds. I've increased the value to 30. This worked. No more timeout. However, I also tried to link dovecot against a self compiled dynamic openssl 1.1.1 and in

A vide se postovi i kategorije... to sam propustio... obrisacu... pa javljam.... Sent from my Samsung Galaxy smartphone. -------- Original message --------From: Jerry <jerry at seibercom.net> Date: 6/8/18 20:59 (GMT+01:00) To: Dovecot Mailing List <dovecot at dovecot.org> Subject: Re: outlook hangs using TLS On Fri, 8 Jun 2018 18:19:14 +0100, Vladimir Tiukhtin stated: >On

Am Freitag, 29. Juli 2016, 09:03:45 CEST schrieb Alex Xu: Hi Alex, > On Fri, 29 Jul 2016 12:24:27 +0200 > > Nikos Mavrogiannopoulos <nmav at gnutls.org> wrote: > > On Fri, Jul 29, 2016 at 7:40 AM, Stephan Mueller > > > > <smueller at chronox.de> wrote: > > > And finally, you have a coding error that is very very common but > > > fatal