Hi,
IMO disabling the session cache is not a good idea, as it will have
destructive consequences on the performance. Better to fix it if it's
broken.
Fabrizio
Il 13/04/20 22:25, Brian P Bockelman ha scritto:
> @wyang007 <https://github.com/wyang007> - you could reasonably argue
> that this and #750 <https://github.com/xrootd/xrootd/issues/750> are
> really issues with |XrdHttp| that are bypassed by |XrdLCMAPS|.
>
> * This ticket is caused because the session cache is not disabled in
> |XrdHttp|. |XrdLCMAPS| does this when it is loaded.
> * #750 <https://github.com/xrootd/xrootd/issues/750> is caused because
> the |SSL_CTX| object is loaded at initialization by |XrdHttp| and a
> corresponding |X509_STORE| is never refreshed. The |X509_STORE|
> pointer is passed from |XrdHttp| to the VOMS library and things blow
> up when VOMS attempts the CRL check (note the error message from
> #750 <https://github.com/xrootd/xrootd/issues/750> is from
> |libvomsapi|, not OpenSSL). |XrdLCMAPS| isn't affected because it
> doesn't use |XrdHttp|'s |X509_STORE| object periodically reloads its
> |X509_STORE| objects every 10 minutes (it also gets a bit clever in
> that is hashes the activity over 63 copies of the cert store so
> multiple threads don't have to share a single global mutex).
>
> —
> You are receiving this because you commented.
> Reply to this email directly, view it on GitHub
> <https://github.com/xrootd/xrootd/issues/1177#issuecomment-613080475>,
> or unsubscribe
> <https://github.com/notifications/unsubscribe-auth/AA7NRDTQ3WO5FGW7BZ7IMWTRMNYJ3ANCNFSM4MG7LP2A>.
>
>
> ------------------------------------------------------------------------
>
> Use REPLY-ALL to reply to list
>
> To unsubscribe from the XROOTD-DEV list, click the following link:
> https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1
>
########################################################################
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1
|