Open Bug 1435954 Opened 6 years ago Updated 2 years ago

certutil AddCert should only use 1 SQLite transaction

Categories

(NSS :: Libraries, defect, P3)

Product:
NSS
Component:
Libraries
Type:
defect

Tracking

(Not tracked)

People

(Reporter: braydenpeterson, Unassigned)

References

(Blocks 1 open bug)

Details

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0
Build ID: 20100101

Steps to reproduce:

Add a certificate to a SQLite cert database via certutil.


Actual results:

Adding a certificate is extremely slow.  I observe 800ms of latency regularly.  Glancing at the source code, and experimenting with ltrace, suggests that certutil's AddCert function generates 2 distinct SQLite transactions: 1 for PK11_ImportCert and 1 for CERT_ChangeCertTrust.  This adds unnecessary overhead.


Expected results:

Adding a certificate to a SQLite cert database with certutil should only use 1 SQLite transaction.
Status: UNCONFIRMED → NEW
Component: Tools → Libraries
Ever confirmed: true
Priority: -- → P3
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.