<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Calibri" size="2"><span style="font-size:11pt;">
<div>Hello Everyone,</div>
<div>I am running Stunnel-5.29 in AiX 7.1 TL3 SP6. I have added the DH param to the bottom of my CERT file. After approximately 24 hours or so the Stunnel CPU usage jumps to about 50% and after a few days to about 90%. Is there a configuration setting I’ve
missed or compile option I need to consider?</div>
<div> </div>
<div>Thanks for your assistance in advance. Below is a cleaned up version of my config file.</div>
<div>-Earl </div>
<div>-------------------------------------------------</div>
<div>; Verify peer certificate</div>
<div>verify = 2</div>
<div> </div>
<div>; Certificate/key is needed in server mode and in client mode</div>
<div>cert = /Server-certificate-all.pem</div>
<div>key = /Server-certificate-all.pem</div>
<div>CAfile = /all_root_ca.pem</div>
<div> </div>
<div>; Protocol version (all, SSLv2, SSLv3, TLSv1)</div>
<div>sslVersion = TLSv1</div>
<div> </div>
<div>; PID path</div>
<div>pid = /etc/oraserver_stunnel.pid</div>
<div> </div>
<div>; Turn off Nagle algorithm</div>
<div>socket = l:TCP_NODELAY=1</div>
<div>socket = r:TCP_NODELAY=1</div>
<div> </div>
<div>; Debug level</div>
<div>debug = 2</div>
<div> </div>
<div>; Use it for client mode</div>
<div>client = no</div>
<div> </div>
<div>; Ciphers</div>
<div>ciphers = DHE-RSA-AES256-SHA</div>
<div> </div>
<div>; Service-level configuration</div>
<div>[ oraserver_DB ]</div>
<div>accept = 15210</div>
<div>connect = server:1622</div>
<div> </div>
<div>[ oraserver_ASM ]</div>
<div>accept = 15211</div>
<div>connect = server:1621</div>
<div> </div>
<div><font face="Times New Roman" size="2"><span style="font-size:9pt;">This message and any attachments are solely for the use of intended recipients. The information contained herein may include trade secrets, protected health or personal information, privileged
or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you are not an intended recipient, you are hereby notified that you received this
email in error, and that any review, dissemination, distribution or copying of this email and any attachment is strictly prohibited. If you have received this email in error, please contact the sender and delete the message and any attachment from your system.
Thank you for your cooperation</span></font></div>
</span></font>
</body>
</html>