On Sun, 25 Feb 2007, Shmulik Regev wrote:

> I wanted to suggest another addition to libcurl - I've recently patched
> libcurl to support caching and reusing of SSL_CTX objects. Creation of these
> objects, and their configuration (primarily reading the cacerts file) adds
> around 200 ms per instantiation on my machine (win XP, dual core, 3 Ghz, 2
> GB RAM) which is not something to ignore if it is frequently done (and in my
> case it is). The logic is simple - instead of freeing a CTX object we save
> it for later reuse in a global list of objects. Currently I've implemented
> this using a global object, but this was just a proof of concept and such an
> approach doesn't really fit into the libcurl design. I think the Share
> object is a more natural container for such a cache. Are you interested in
> such an enhancement? If so, do you agree the Share object is the proper
> place to add it?

Yes, I think it sounds like a good addition and having it added to the share
object seems like the logical place for it, as it would allow several easy
handles to share the same pool of SSL_CTX objects.

I guess that by default we can have this SSL_CTX caching made per easy handle,
when used with the easy interface and per multi handle when the multi
interface is used. Similar to how the connection cache is shared now. Of
course we need a sensible max number of objects kept in the cache.

-- 
  Commercial curl and libcurl Technical Support: http://haxx.se/curl.html