[Dovecot] Major CPU spike for SSL parameters?

Peter Chiu pc8888 at gmail.com
Fri Jan 20 04:49:00 EET 2006


I applied the patch to master-settings.c and the problem is still there

Jan 19 20:01:51 foxmulder dovecot: SSL parameters regeneration completed
Jan 19 20:13:02 foxmulder dovecot: SSL parameters regeneration completed
Jan 19 20:21:33 foxmulder dovecot: SSL parameters regeneration completed
Jan 19 20:33:17 foxmulder dovecot: SSL parameters regeneration completed
Jan 19 20:42:03 foxmulder dovecot: SSL parameters regeneration completed
Jan 19 20:52:12 foxmulder dovecot: SSL parameters regeneration completed

foxmulder:~$ uname -srp
FreeBSD 6.0-RELEASE-p3 i386

foxmulder:etc$ grep ssl dovecot.conf
ssl_cert_file = /etc/ssl/certs/dovecot.pem
ssl_key_file = /etc/ssl/private/dovecot.pem
ssl_parameters_regenerate = 48



Timo Sirainen wrote:
> On Wed, 2006-01-18 at 18:40 -0500, Todd Vierling wrote:
>> On Wed, 18 Jan 2006, Todd Vierling wrote:
>>
>>> After setting "ssl_parameters_regenerate" to the explicit value of 168, it's
>>> still happening this often.  I now set it to 0 to disable regeneration for
>>> the moment.
>> And it's still happening every 10-ish minutes.  Thoughts?
>
> Happens with 64bit systems. Fix in CVS and here:
>
> Index: src/master/master-settings.c
> ===================================================================
> RCS file: /var/lib/cvs/dovecot/src/master/master-settings.c,v
> retrieving revision 1.105
> diff -u -r1.105 master-settings.c
> --- src/master/master-settings.c	18 Jan 2006 23:14:45 -0000	1.105
> +++ src/master/master-settings.c	19 Jan 2006 20:38:31 -0000
> @@ -64,7 +64,7 @@
>  	DEF(SET_STR, ssl_cert_file),
>  	DEF(SET_STR, ssl_key_file),
>  	DEF(SET_STR, ssl_key_password),
> -	DEF(SET_STR, ssl_parameters_regenerate),
> +	DEF(SET_INT, ssl_parameters_regenerate),
>  	DEF(SET_STR, ssl_cipher_list),
>  	DEF(SET_BOOL, ssl_verify_client_cert),
>  	DEF(SET_BOOL, disable_plaintext_auth),
>


More information about the dovecot mailing list