[stunnel-users] stunnel 5.18 may keep high CPU usage

[Michal Trojnara]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 14.06.2015 00:04, Dod wrote:
> I  use  sTunnel for POP-SSL and SMTP-SSL for 12 accounts (gmail,
> yahoo ...)  but  I noticed that after a few connexions sTunnel may
> keep high CPU, 25% as reported by TaskManager (50% on core 1 and 3
> on my Core-i5 quad-core).

After 1 minute of running stunnel running in server mode starts
computing new DH parameters.  This usually takes a few minutes
depending on your hardware.  The process is repeated every 24 hours.

If you don't want it, you can generate static DH parameters with:
    openssl dhparam 2048
and append them to your stunnel.conf

> Sometime the 25% CPU usage disappear by its own, sometime it can
> stay forever.

...depending on how you define "forever"...

> Never noticed such problem on previous versions.
> 
> Standard logs show nothing special.

You should see "DH parameters updated" message when the process completes.

Mike
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=fdK3
-----END PGP SIGNATURE-----