Hello Everyone,

I am running Stunnel-5.29 in AiX 7.1 TL3 SP6. I have added the DH param to the bottom of my CERT file. After approximately 24 hours or so the Stunnel CPU usage jumps to about 50% and after a few days to about 90%. Is there a configuration setting I’ve missed or compile option I need to consider?

Thanks for your assistance in advance. Below is a cleaned up version of my config file.

-Earl

-------------------------------------------------

; Verify peer certificate

verify = 2

; Certificate/key is needed in server mode and in client mode

cert = /Server-certificate-all.pem

key = /Server-certificate-all.pem

CAfile = /all_root_ca.pem

; Protocol version (all, SSLv2, SSLv3, TLSv1)

sslVersion = TLSv1

; PID path

pid = /etc/oraserver_stunnel.pid

; Turn off Nagle algorithm

socket = l:TCP_NODELAY=1

socket = r:TCP_NODELAY=1

; Debug level

debug = 2

; Use it for client mode

client = no

; Ciphers

ciphers = DHE-RSA-AES256-SHA

; Service-level configuration

[ oraserver_DB ]

accept = 15210

connect = server:1622

[ oraserver_ASM ]

accept = 15211

connect = server:1621

This message and any attachments are solely for the use of intended recipients. The information contained herein may include trade secrets, protected health or personal information, privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you are not an intended recipient, you are hereby notified that you received this email in error, and that any review, dissemination, distribution or copying of this email and any attachment is strictly prohibited. If you have received this email in error, please contact the sender and delete the message and any attachment from your system. Thank you for your cooperation