Re: IMAP over SSL (only) handshake hangs

Hello Helder,

If there is no enough random seed OpenSSL will not hang, just return an error.

Even /dev/random is opened in non-blocking mode. This is true only if OpenSSL is built with non-blocking mode.
https://github.com/openssl/openssl/blob/master/crypto/rand/rand_unix.c

If it hangs after some time could it be a handle leak?
In the past, I had a similar problem and used "lsof" and "ulimit" commands to see is it reached.

This error could be a possible track to a handle leak.
setrlimit: Unable to set file
descriptors limit to -1: Operation not permitted

Regards,
Zhivko


On Mon, Nov 11, 2019, at 2:53 PM, Helder Guerreiro via Info-cyrus wrote:
> On 10/11/19 00:19, Helder Guerreiro via Info-cyrus wrote:
> > On 09/11/2019 23.34, Patrick Boutilier wrote:
> >> Almost sounds like you are running out of entropy. What does this show?
> >>
> >> cat /proc/sys/kernel/random/entropy_avail
> > 
> > Right now it's at 3769 bytes. I'll monitor this.
> 
> It happened again, the entropy available never got bellow 3600 (logged 
> it every minute or so).
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>

----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus