IMAP over SSL (only) handshake hangs

[Raphaël Halimi]

Le 11/11/2019 à 13:53, Helder Guerreiro via Info-cyrus a écrit :
> It happened again, the entropy available never got bellow 3600 (logged 
> it every minute or so).

Is Cyrus installed in a VM ?

I had the same problem after upgrading Debian from 9 to 10, on some
virtual servers, with OpenSSH and OpenVPN.

I solved the problem by adding a virtual random number generator on
those virtual machines. Here's the XML to add for libvirt/QEMU:

<rng model="virtio">
  <backend model="random">/dev/urandom</backend>
  <alias name="rng0"/>
  <address type="pci" domain="0x0000" bus="0x00" slot="0x07"
function="0x0"/>
</rng>

(beware of word-wrapping, "address" is a single line)

Regards,

-- 
Raphaël Halimi

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: OpenPGP digital signature
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20191203/14cc287f/attachment.sig>