Re: [exim] TLS / Entropy

2006-01-11 Thread Marc Haber
On Tue, 10 Jan 2006 20:06:12 +0100, Florian Weimer <[EMAIL PROTECTED]> wrote: >They don't provide Perfect Forwarding Secrecy, so they don't need >cryptographically strong random numbers. I think using PFS is a >mistake in this context (because it's too costly, as you've noted), >but the last time

Re: [exim] TLS / Entropy

2006-01-10 Thread Florian Weimer
* Sander Smeenk: > How does the rest of the world create all the entropy on their > servers? They don't provide Perfect Forwarding Secrecy, so they don't need cryptographically strong random numbers. I think using PFS is a mistake in this context (because it's too costly, as you've noted), but t

Re: [exim] TLS / Entropy

2005-12-15 Thread Stephen Gran
On Thu, Dec 15, 2005 at 02:37:54PM +0100, Sander Smeenk said: > How does the rest of the world create all the entropy on their servers? > Are others also seeing this delay in TLS deliveries or is it a necessary > evil which comes with the use of TLS? I have noticed that in general 2.6 linux kernel

RE: [exim] TLS / Entropy

2005-12-15 Thread Timothy M. Spear
9:23 AM To: exim-users@exim.org Subject: Re: [exim] TLS / Entropy Hello, yes, I experienced such symptomps as well (mainly with IMAPS/POPS sessions on the Cyrus server, not with exim). I'm not sure if exim explicitly asks for the random device or if it's more part of the SSL librari

Re: [exim] TLS / Entropy

2005-12-15 Thread Heiko Schlittermann
Hello, yes, I experienced such symptomps as well (mainly with IMAPS/POPS sessions on the Cyrus server, not with exim). I'm not sure if exim explicitly asks for the random device or if it's more part of the SSL libraries. On my systems I changed /dev/random into a symlink pointing to /dev/urandom

[exim] TLS / Entropy

2005-12-15 Thread Sander Smeenk
Hello, I'm a keen Exim4 user (4.54, 4.60, Debian, monolithic config) and I'd like to use TLS as much as possible. Not to authenticate senders, but just to encrypt transfers between servers. Yet, i notice that my server(s) lack entropy, or, i think that's the case. My users are complaining that it