On Tue, 07 Sep 2010, Clement Hermann (nodens) wrote:
> I always use /dev/urandom if I don't have hardware RNG on a busy server,
> because availability is more important than protection against a very
> unlikely threat, and I did have some problem under heavy load.
If you have a HRNG properly fee
Le 06/09/2010 23:46, Bron Gondwana a écrit :
> On Mon, Sep 06, 2010 at 11:42:38AM +0200, "Clément Hermann (nodens)" wrote:
>> Le 06/09/2010 11:26, Ethariel a écrit :
>>> Hello,
>>>
>>> auto-answering.
>>> During the upgrade process the /dev/* permission were broken. It
>>> includes /dev/urandom whi
On Mon, Sep 06, 2010 at 11:42:38AM +0200, "Clément Hermann (nodens)" wrote:
> Le 06/09/2010 11:26, Ethariel a écrit :
> > Hello,
> >
> > auto-answering.
> > During the upgrade process the /dev/* permission were broken. It
> > includes /dev/urandom which I think (can someone confirm) is used by SSL.
On Mon, 06 Sep 2010, "Clément Hermann (nodens)" wrote:
> Actually SSL is supposed to use /dev/random which provide better
> randomness (because of better entropy gathered via keyboards and disks,
> or better yet, hardware RNG), less likely to be predictable than
> /dev/urandom.
Only if it has a
Le 06/09/2010 11:26, Ethariel a écrit :
> Hello,
>
> auto-answering.
> During the upgrade process the /dev/* permission were broken. It
> includes /dev/urandom which I think (can someone confirm) is used by SSL.
Actually SSL is supposed to use /dev/random which provide better
randomness (because
Hello,
auto-answering.
During the upgrade process the /dev/* permission were broken. It includes
/dev/urandom which I think (can someone confirm) is used by SSL.
Put permission back and all is working fine.
Ethariel
2010/9/5 Ethariel
> Hello,
>
> I need to upgrade a server to the last Mandriva
Hello,
I need to upgrade a server to the last Mandriva, so cyrus-imapd as upgraded
in the process.
imap, pop and sieve are working fine as before.
pop3s and imaps are no more working.
I try to re-generate some new certificate, same error.
>From the client :
openssl s_client -connect localhost: