Hello, > Thanks for the info Marek, much appreciated. I used the above info > and it worked for reducing the key strength, but it didn't solve the delays > in sending email. Still good to know though since it's one less thing to > consider. Must be something else that's causing the long delays. Even > for short emails such as this, it takes an extra 45 seconds or so compared > to sending the email with SSL/TLS completely disabled. Maybe it's the > certificate verification step that's causing the Thunderbird delays. The > CA and the certificate we're using on the server side are self-generated > by openssl. My suggestion is to double check DNS resolving system. Such long delays when connecting may be caused be problems with reverse DNS. On Linux you may check this with:
$ dig some.domain.name $ dig -x some.ip.number If (for examle) sendmail checks some fields in certificate (CN) and tries resolve this to IP address and next to domain name (DNS double check) then this may generate such delays. Best regards, -- Marek Marcola <[EMAIL PROTECTED]> ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [EMAIL PROTECTED]
