[stunnel-users] AiX 7.1 TL3 SP6 - Stunnel Memory Usages grows after 24 hours

Benjamin, Earl earl.benjamin at siemens.com
Tue Jul 19 20:42:18 CEST 2016

Hello Everyone,
I am running Stunnel-5.29 in AiX 7.1 TL3 SP6.  I have added the DH param to the bottom of my CERT file.  After approximately 24 hours or so the Stunnel CPU usage jumps to about 50% and after a few days to about 90%.  Is there a configuration setting I've missed or compile option I need to consider?

Thanks for your assistance in advance.  Below is a cleaned up version of my config file.
; Verify peer certificate
verify = 2

; Certificate/key is needed in server mode and in client mode
cert = /Server-certificate-all.pem
key = /Server-certificate-all.pem
CAfile = /all_root_ca.pem

; Protocol version (all, SSLv2, SSLv3, TLSv1)
sslVersion = TLSv1

; PID path
pid = /etc/oraserver_stunnel.pid

; Turn off Nagle algorithm
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1

; Debug level
debug = 2

; Use it for client mode
client = no

; Ciphers
ciphers = DHE-RSA-AES256-SHA

; Service-level configuration
[ oraserver_DB ]
accept = 15210
connect = server:1622

[ oraserver_ASM ]
accept = 15211
connect = server:1621

This message and any attachments are solely for the use of intended recipients. The information contained herein may include trade secrets, protected health or personal information, privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you are not an intended recipient, you are hereby notified that you received this email in error, and that any review, dissemination, distribution or copying of this email and any attachment is strictly prohibited. If you have received this email in error, please contact the sender and delete the message and any attachment from your system. Thank you for your cooperation
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20160719/5433780c/attachment.html>

More information about the stunnel-users mailing list