[...]
> SSL_CTX_load_verify_locations why consume 20ms every time? Openssl read
> /etc/pki/tls/certs/ca-bundle.crt once time, I don't change this file, why
> Openssl not cache this?

As a workaround, you can set CURLOPT_CAINFO to point to a single certificate,
(possibly just a dummy certificate) and use a hashed certificate
directory (created
by e.g. c_rehash) to manager your actual trust store, and point CURLOPT_CAPATH
to it.

rainer
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2017-08-17