Details
Description
The most visible effect is the server startup on Windows in 11.4, which is now 10 times slower than it used to be, with 93% or the time spent in _CheckProbablePrime, coming from wolfssl_EVP_PKEY_keygen , that is used to generate private key, that is used to generate self-signed server SSL certificate (MDEV-31856)
Also, establishing an SSL connection is relatively slow, because of the same reason, WolfSSL large number math, and prime calculations.
There are different build options to speed up math, including assembly optimizations.
Interesting ones are
- WOLFSSL_SP_MATH_ALL ("new" math library, they promote now as being faster, instead of previously hyped fastmath)
- WOLFSSL_HAVE_SP_RSA (math optimizations for common RSA key sizes, 1024/2048/4096)
- WOLFSSL_SP_X86_64, WOLFSSL_SP_X86_64_ASM - optimizations for Intel architecture, including assembly
Attachments
Issue Links
- relates to
-
MDEV-31856 use ephemeral ssl certificates
- Closed