Bug#338319: proposed solutions

Nikos Mavrogiannopoulos n.mavrogiannopoulos at gmail.com
Sun Oct 21 21:13:20 UTC 2007


I've seen this problem to be open quite long time, and I believe it occurs 
because exim tries to generate Diffie Hellman parameters on the fly when they 
don't exist. This situation may occur when the gnutls-params file is missing. 
I propose some solutions.

1. Return an error if the gnutls-params file does not exist. (sol1.patch)

2. Generate the parameters in a non-blocking way using /dev/urandom. 
(sol2.patch)

3. Read static parameters if the file does not exist.


I believe the third solution is the most elegant. Generating these parameters 
on the fly (sol2) even if /dev/urandom is used is time consuming and not 
really appropriate for a server. The idea is to have them pregenerated. 

Using static parameters (sol3) does not harm in any way.
If somebody wants different ones he can generate them.

So the 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sol1.patch
Type: text/x-diff
Size: 2032 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-exim4-maintainers/attachments/20071022/54f67102/attachment.patch 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sol2.patch
Type: text/x-diff
Size: 520 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-exim4-maintainers/attachments/20071022/54f67102/attachment-0001.patch 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sol3.patch
Type: text/x-diff
Size: 2864 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-exim4-maintainers/attachments/20071022/54f67102/attachment-0002.patch 


More information about the Pkg-exim4-maintainers mailing list