On Wed, 16 Aug 2017, Jack wrote:

> 1. curl_multi_socket_action, I pass active fd, but libcurl also do others
> fds,

For every call to curl_multi_socket_action(), libcurl will also take care of
other transfers that have a timer that has expired. None, one or many
transfers.

If you call it with CURL_SOCKET_TIMEOUT, the difference is basically that
there's no "primary" file descriptor to check but it only runs through the
expired timers.

> SSL_CTX_load_verify_locations why consume 20ms every time? Openssl read
> /etc/pki/tls/certs/ca-bundle.crt once time, I don't change this file, why
> Openssl not cache this?

Ah right! Good detective work.

This is actually something we should put some work into. The example
cacertinmem.c [*] shows how it could be done to keep cacerts in memory or we
could just re-use the SSL "context" somehow (as that's where OpenSSL holds the
cacert data I believe). That loading of the CA cert, or loading a myriad of
tiny small CA cert files, can take a significant time. And as they rarely
change, they should be really good to cache.

[*] = https://curl.haxx.se/libcurl/c/cacertinmem.html

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html