[prev in list] [next in list] [prev in thread] [next in thread]
List: kroupware
Subject: SSL/TLS entropy problem, aka pops timeouts (was: sasl ldap problem)
From: Bernhard Reiter <bernhard () intevation ! de>
Date: 2006-11-17 8:24:22
Message-ID: 200611170924.26118.bernhard () intevation ! de
[Download RAW message or body]
[Attachment #2 (multipart/signed)]
Hi Divan,
On Friday 17 November 2006 08:46, Divan Santana wrote:
> I am glad to contribute this fix back. I hope someone finds it useful.
> I think it might be kubuntu specific.
>
> http://www.kolab.org/pipermail/kolab-users/2006-February/004394.html
> mv /dev/random /dev/random.backup
> ln -s /dev/urandom /dev/random
note that doing this is likely to weaken the encryption of your SSL and TLS
connections. The applications that need higher quality entropy will use
/dev/random and might now get lower quality.
See http://en.wikipedia.org/wiki//dev/random
for the differences of /dev/random and /dev/urandom.
A better fix probably is to add a hardware entropy generator
or to find out why the entropy is empty.
> Can't believe that fixed it. I don't quite understand but at least its
> working.
>
> Now POP doesn't time out randomly etc.
If /dev/random does not have enough entropy ready it will block
and thus cause a timeout.
Bernhard
--
Managing Director - Owner, www.intevation.net (Free Software Company)
Germany Coordinator, fsfeurope.org (Non-Profit Org for Free Software)
www.kolab-konsortium.com (Email/Groupware Solution, Professional Service)
["smime.p7s" (application/pkcs7-signature)]
_______________________________________________
Kolab-users mailing list
Kolab-users@kolab.org
https://kolab.org/mailman/listinfo/kolab-users
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic