Buy commercial curl support from WolfSSL. We help you work
out your issues, debug your libcurl applications, use the API, port to new
platforms, add new features and more. With a team lead by the curl founder
himself.
Re: Curl + OpenSSL 3.x is painfully slow on windows
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: Aleksandar Lazic via curl-library <curl-library_at_lists.haxx.se>
Date: Mon, 17 Apr 2023 12:24:50 +0200
Hi.
On 17.04.23 10:48, Zakrzewski, Jakub via curl-library wrote:
> Hi All,
>
> first, I know this is not really a curl issue per se, but I wanted to
> draw attention to the problem.
>
> After I upgraded a bunch of libraries in our project, our customers
> noticed slowness in HTTP requests. I have profiled it, and 84% of the
> time was spent in |fgets(...)| reading the CA-Bundle deep inside OpenSSL.
> I have worked this around by reading the file myself, and providing it
> as a blob, which was immediate 10x boost.
>
> We use curl easy interface (changing to multi is out of the question in
> the nearest future because of architectural reasons).
>
> Just wanted to ask if this would maybe be something |libcurl| wanted to
> address?
> It's a bit unfortunate for me right, that caching is only available for
> the multi.
Well the performance penalty of OpenSSL is quite long discussed in this
issue.
https://github.com/openssl/openssl/issues/17064
Do you have any chance to switch back to OpenSSL 1.1.1?
> --
> Have a good one,
> Jakub
Regards
Alex
Date: Mon, 17 Apr 2023 12:24:50 +0200
Hi.
On 17.04.23 10:48, Zakrzewski, Jakub via curl-library wrote:
> Hi All,
>
> first, I know this is not really a curl issue per se, but I wanted to
> draw attention to the problem.
>
> After I upgraded a bunch of libraries in our project, our customers
> noticed slowness in HTTP requests. I have profiled it, and 84% of the
> time was spent in |fgets(...)| reading the CA-Bundle deep inside OpenSSL.
> I have worked this around by reading the file myself, and providing it
> as a blob, which was immediate 10x boost.
>
> We use curl easy interface (changing to multi is out of the question in
> the nearest future because of architectural reasons).
>
> Just wanted to ask if this would maybe be something |libcurl| wanted to
> address?
> It's a bit unfortunate for me right, that caching is only available for
> the multi.
Well the performance penalty of OpenSSL is quite long discussed in this
issue.
https://github.com/openssl/openssl/issues/17064
Do you have any chance to switch back to OpenSSL 1.1.1?
> --
> Have a good one,
> Jakub
Regards
Alex
-- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.htmlReceived on 2023-04-17