For the NSS backend, this PR will periodically parse all CAs in the CA directory and concatenate the unique CAs into a single file.

The result is:

Drastically fewer memory leaks in the libnss backend for libcurl.
Far faster parsing of CAs (1 file to read versus ~1200).
Avoids a bug where NSS tries to parse CRLs as a CA.

@esindril - I think these will solve all (most? many?) of your NSS woes. Would like to hear from you before it gets merged in.

You can view, comment on, or merge this pull request online at:

https://github.com/xrootd/xrootd/pull/1431

Commit Summary

Overhaul curl's usage of CAs.

File Changes

Patch Links:

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or unsubscribe.

[ { "@context": "http://schema.org", "@type": "EmailMessage", "potentialAction": { "@type": "ViewAction", "target": "https://github.com/xrootd/xrootd/pull/1431", "url": "https://github.com/xrootd/xrootd/pull/1431", "name": "View Pull Request" }, "description": "View this Pull Request on GitHub", "publisher": { "@type": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1