Buy commercial curl support from WolfSSL. We help you work
out your issues, debug your libcurl applications, use the API, port to new
platforms, add new features and more. With a team lead by the curl founder
himself.
Re: Curl + OpenSSL 3.x is painfully slow on windows
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: Daniel Stenberg via curl-library <curl-library_at_lists.haxx.se>
Date: Mon, 17 Apr 2023 12:38:17 +0200 (CEST)
On Mon, 17 Apr 2023, Zakrzewski, Jakub via curl-library wrote:
> After I upgraded a bunch of libraries in our project, our customers noticed
> slowness in HTTP requests. I have profiled it, and 84% of the time was spent
> in fgets(...)​ reading the CA-Bundle deep inside OpenSSL. I have worked this
> around by reading the file myself, and providing it as a blob, which was
> immediate 10x boost.
This is not the only performance regression people have found and reported on
OpenSSL 3.x. Luckily, we support lots of other libraries as well.
> Just wanted to ask if this would maybe be something libcurl​ wanted to address?
Do you have any specific ideas how we even could do it apart from recommending
library alternatives or downgrading?
> It's a bit unfortunate for me right, that caching is only available for the
> multi.
I'm not sure what you are referring to, but CURLOPT_CA_CACHE_TIMEOUT works for
an easy handle used by the easy interface as well.
Date: Mon, 17 Apr 2023 12:38:17 +0200 (CEST)
On Mon, 17 Apr 2023, Zakrzewski, Jakub via curl-library wrote:
> After I upgraded a bunch of libraries in our project, our customers noticed
> slowness in HTTP requests. I have profiled it, and 84% of the time was spent
> in fgets(...)​ reading the CA-Bundle deep inside OpenSSL. I have worked this
> around by reading the file myself, and providing it as a blob, which was
> immediate 10x boost.
This is not the only performance regression people have found and reported on
OpenSSL 3.x. Luckily, we support lots of other libraries as well.
> Just wanted to ask if this would maybe be something libcurl​ wanted to address?
Do you have any specific ideas how we even could do it apart from recommending
library alternatives or downgrading?
> It's a bit unfortunate for me right, that caching is only available for the
> multi.
I'm not sure what you are referring to, but CURLOPT_CA_CACHE_TIMEOUT works for
an easy handle used by the easy interface as well.
-- / daniel.haxx.se | Commercial curl support up to 24x7 is available! | Private help, bug fixes, support, ports, new features | https://curl.se/support.html
-- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.htmlReceived on 2023-04-17