Hi,
   I'm having some issues with Cherokee (0.5.5.dfsg-2 on Debian 4.0/Etch, ARM 
CPU -- Linux 2.6.18-5-ixp4xx armv5tel). More specifically, the SSL code is 
using /dev/random as an entropy source, and blocking when it runs out of 
randomness. Thus, any SSL connections grind to a screeching halt pretty quickly.

<http://www.cherokee-project.com/archive/2006-July/001601.html> makes some 
reference to a similar problem, and a resolution at 
<http://www.cherokee-project.com/bugs/ticket/53>, but this just displays a 
blank page (IIRC it should fire up Trac).

Does anyone know how I could make Cherokee / Libgnutls use /dev/urandom 
instead, to stop this annoying blocking?

Strace log:
open("/dev/random", O_RDONLY)           = 8
select(9, [8], NULL, NULL, {3, 0})      = 1 (in [8], left {3, 0})
read(8, "\377\360\0\244\331\317 \265\ve\271Q\276d\372eW~\n\312\230"..., 300) = 
67
select(9, [8], NULL, NULL, {3, 0})      = 0 (Timeout)
select(9, [8], NULL, NULL, {3, 0})      = 1 (in [8], left {2, 970000})
read(8, "\273\364\301$2\322\"{", 233)   = 8
select(9, [8], NULL, NULL, {3, 0})      = 1 (in [8], left {1, 200000})
read(8, "L\220\265\226\202zX\355", 225) = 8
select(9, [8], NULL, NULL, {3, 0})      = 1 (in [8], left {1, 120000})
read(8, "\370\322`\372\227\t?;", 217)   = 8
select(9, [8], NULL, NULL, {3, 0})      = 0 (Timeout)
select(9, [8], NULL, NULL, {3, 0})      = 1 (in [8], left {2, 730000})
read(8, "\34\375\300\326^\330\316C", 209) = 8
select(9, [8], NULL, NULL, {3, 0})      = 0 (Timeout)
select(9, [8], NULL, NULL, {3, 0})      = 0 (Timeout)
select(9, [8], NULL, NULL, {3, 0})      = 1 (in [8], left {2, 350000})
read(8, "\217\313\352o\223\32\0\206", 201) = 8
select(9, [8], NULL, NULL, {3, 0})      = 0 (Timeout)
select(9, [8], NULL, NULL, {3, 0})      = 0 (Timeout)
select(9, [8], NULL, NULL, {3, 0})      = 0 (Timeout)

... and so on ...

FWIW, I'm also building 0.5.6 for Etch/arm5tel, and might have a go at 
building one of the 0.6 CVS releases to play with too. Assuming Alvaro doesn't 
mind, I'll put the .deb files online later.

Thanks,
-- 
Phil.                         |  (\_/)  This is Bunny. Copy and paste Bunny
[EMAIL PROTECTED]           | (='.'=) into your signature to help him gain
http://www.philpem.me.uk/     | (")_(") world domination.
_______________________________________________
Cherokee mailing list
[email protected]
http://cherokee-project.com/cgi-bin/mailman/listinfo/cherokee

Reply via email to