Re: IMAP over SSL (only) handshake hangs

Raphaël Halimi <[email protected]>
Newsgroups gmane.mail.imap.cyrus
Message-ID <[email protected]>
Le 11/11/2019 à 13:53, Helder Guerreiro via Info-cyrus a écrit :
> It happened again, the entropy available never got bellow 3600 (logged 
> it every minute or so).

Is Cyrus installed in a VM ?

I had the same problem after upgrading Debian from 9 to 10, on some
virtual servers, with OpenSSH and OpenVPN.

I solved the problem by adding a virtual random number generator on
those virtual machines. Here's the XML to add for libvirt/QEMU:

<rng model="virtio">
  <backend model="random">/dev/urandom</backend>
  <alias name="rng0"/>
  <address type="pci" domain="0x0000" bus="0x00" slot="0x07"
function="0x0"/>
</rng>

(beware of word-wrapping, "address" is a single line)

Regards,

-- 
Raphaël Halimi

----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
signature.asc (application/pgp-signature, 963 B)
-----BEGIN PGP SIGNATURE-----
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=ZVYz
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.