For the NSS backend, this PR will periodically parse all CAs in the CA directory and concatenate the unique CAs into a single file.
The result is:
- Drastically fewer memory leaks in the libnss backend for libcurl.
- Far faster parsing of CAs (1 file to read versus ~1200).
- Avoids a bug where NSS tries to parse CRLs as a CA.
@esindril - I think these will solve all (most? many?) of your NSS woes. Would like to hear from you before it gets merged in.
You can view, comment on, or merge this pull request online at:
https://github.com/xrootd/xrootd/pull/1431
-- Commit Summary --
* Overhaul curl's usage of CAs.
-- File Changes --
M src/XrdCrypto/XrdCryptosslAux.cc (62)
M src/XrdCrypto/XrdCryptosslAux.hh (4)
M src/XrdTpc.cmake (1)
M src/XrdTpc/XrdTpcConfigure.cc (3)
A src/XrdTpc/XrdTpcNSSSupport.cc (265)
A src/XrdTpc/XrdTpcNSSSupport.hh (114)
M src/XrdTpc/XrdTpcTPC.cc (20)
M src/XrdTpc/XrdTpcTPC.hh (8)
-- Patch Links --
https://github.com/xrootd/xrootd/pull/1431.patch
https://github.com/xrootd/xrootd/pull/1431.diff
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/xrootd/xrootd/pull/1431
########################################################################
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1
