Bug#543941: OpenVPN with LDAP+TLS authentication runs into file exhaustion -- Analysis and suggested workaround.

2009-10-24 Thread Lars Ellenberg
attached is a simple program to reproduce, and workaround the issue. libgcrypt standard behaviour is, at least on linux, to open /dev/urandom once, save that file descriptor in some static variable, and re-use it wherever appropriate. and never ever close that file descriptor, but on exit or fork.

Bug#543941: OpenVPN with LDAP+TLS authentication runs into file exhaustion

2009-10-02 Thread chantra
Thanks Simon, Reassignment done chantra -- http://www.debuntu.org !DSPAM:4ac6673b90402654897080!

Bug#543941: OpenVPN with LDAP+TLS authentication runs into file exhaustion

2009-10-02 Thread Simon Josefsson
chantra writes: > Reassigning to libgnutls, the probable culprit package. > > The common factor between libgnutls and libssl 2 would be the use of the > same crypt function AFAICS, so I actually wonder if this is down to > libc6 :s. > > Would maintainer of ssl/gnutls confirm that it is the source

Bug#543941: OpenVPN with LDAP+TLS authentication runs into file exhaustion

2009-10-02 Thread chantra
Reassigning to libgnutls, the probable culprit package. The common factor between libgnutls and libssl 2 would be the use of the same crypt function AFAICS, so I actually wonder if this is down to libc6 :s. Would maintainer of ssl/gnutls confirm that it is the source of the issue? cheers, chan

Bug#543941: OpenVPN with LDAP+TLS authentication runs into file exhaustion

2009-10-02 Thread Alberto Gonzalez Iniesta
On Thu, Aug 27, 2009 at 05:16:05PM +0200, chantra wrote: > not reproduceable on CentOS 5.3 with : > openldap-clients-2.3.43-3.el5 > openldap-2.3.43-3.el5 > pam-0.99.6.2-4.el5 > nss_ldap-253-17.el5 > openvpn-2.0.9-1.el5.rf > > Issue is only happening when LDAP is used with TLS support. On every