[Dovecot] Major CPU spike for SSL parameters?

Timo Sirainen tss at iki.fi
Sun Jan 22 18:16:44 EET 2006


On Sun, 2006-01-22 at 23:26 +0800, John Wong wrote:
> i upgrade 1.0-beta1 to cvs version, i use openbsd/i386
> i tried this 3 settings
> -----------------------------------------------------------------
> ssl_parameters_regenerate = 0
> ssl_parameters_regenerate = 68
> #ssl_parameters_regenerate = 168   (default)
> -----------------------------------------------------------------
> all setting have this problem too (every 10mins regen SSL)

Could you try what it writes to logs with this patch:

diff -u -r1.21 ssl-init.c
--- src/master/ssl-init.c	22 Jan 2006 10:50:54 -0000	1.21
+++ src/master/ssl-init.c	22 Jan 2006 16:16:14 -0000
@@ -98,6 +98,7 @@
 	   are correct */
 	regen_time = set->ssl_parameters_regenerate == 0 ? ioloop_time :
 		st.st_mtime + (time_t)(set->ssl_parameters_regenerate*3600);
+	i_info("ssl_parameters_regenerate = %d", set->ssl_parameters_regenerate);
 	if (regen_time < ioloop_time || st.st_size == 0 ||
 	    st.st_uid != master_uid || st.st_gid != getegid()) {
 		if (foreground) {

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20060122/fd021b90/attachment.pgp


More information about the dovecot mailing list