TLS, qmail-smtpd hogging CPU

[BluntObject]

I have this issue with Plesk 8.1.1 on Debian 3.1:

http://forum.swsoft.com/showthread.php?s=&threadid=40173&highlight=tls

i.e. qmail-smtpd processes using all available CPU.

The fix described in that thread (renaming the dhparam{512,1024}.pem files to dh{512,1024}.pem under /var/qmail/control) has worked fine for the last month or so.

We're now seeing the old high-load behaviour again despite no changes or updates being made to that host, and the fix is still in place.

We've resorted to disabling qmail's use of TLS by moving /var/qmail/control/{clientcert,servercert}.pem out of the way. That works most of the time but breaks for some SMTP clients which don't try without TLS when the STARTTLS command fails (exim mainly) so we do need a real fix.

Any thoughts?

 

[BluntObject]

Some looking around with strace and strings shows that qmail-smtpd is now looking for the files with the original names again.

i.e. dhparam1024.pem not dh1024.pem, and dhparam512.pem not dh512.pem.