Open Bug 1827970 Opened 3 years ago Updated 2 years ago

[meta] libssl should avoid creating CERTCertificates before they are needed

Categories

(NSS :: Libraries, enhancement, P3)

enhancement

Tracking

(Not tracked)

People

(Reporter: jschanck, Unassigned)

References

(Depends on 1 open bug)

Details

(Keywords: meta, Whiteboard: [nss-fx])

A significant percentage of TLS handshake time is spent instantiating CERTCertificates that are not used by PSM. To the extent that it is possible, structures in libssl should store DER encoded certificate data instead of CERTCertificates. Routines that require a CERTCertificate should be modified to instantiate one on the fly.

Severity: -- → S4
Severity: S4 → N/A
Summary: libssl should avoid creating CERTCertificates before they are needed → [meta] libssl should avoid creating CERTCertificates before they are needed
Depends on: 1890618
See Also: → 1891826
Depends on: 1892872
Depends on: 1893334
No longer depends on: 1893334
You need to log in before you can comment on or make changes to this bug.