651056 - PK11_ListCerts is very slow (both in cert8.db and cert9.db)

Status: RESOLVED INACTIVE

(NSS :: Libraries, defect, P5)

Description

[u238590]

I created 1000 Virtual Servers with 1000 certs. At server startup for SNI, each Virtual Server will call PK11_ListCerts(). This call is very slow.

Its a 32 core system with 8 cores enabled.

$prtconf
System Configuration:  Sun Microsystems  sun4v
Memory size: 32760 Megabytes
System Peripherals (Software Nodes): SUNW,Sun-Fire-T200
...

With cert8.db : 
~~~~~~~~~~~~~~
# date
Mon Apr 18 06:33:15 PDT 2011
# ../bin/startserv
# date
Mon Apr 18 15:23:00 PDT 2011

This took almost 9 hours for the server to startup. 

With cert9.db its still going on....
-------------------------------------------------------------------
Attached is the sample program and NSS Dbs :
 server.cpp (has sql: hardcoded for cert9.db change it when u use cert8.db)  
 Makefile  
 cert8.db key3.db secmod.db
 cert9.db key4.db pkcs11.txt  
-------------------------------------------------------------------
As a workaround I will try to call PK11_ListCerts() outside the loop once for the whole server instance. But still it would be nice if its performance could be improved.

Comment 1

[u238590]

Attachment: Attached is the sample program and NSS cert8 Dbs

Comment 2

[u238590]

Note that the time taken is random.

When I started Web Server with cert9.db with all 32 cores it took almost 6 hours :
#date 
Tue Apr 19 00:52:36 PDT 2011
# date
Tue Apr 19 06:36:56 PDT 2011

cert9.db sample program attached took 12 hours:
#date
Tue Apr 19 01:34:07 PDT 2011
# ./a.out && date
Tue Apr 19 13:09:21 PDT 2011