Eric, Thanks for adding the link. Just to be clear, Matt's work is now included in the primary repo, so download it will get Matt's work.
For those upgrading from an older version, you will need to build the extension; the helper binary is no longer supported. Thanks, Peter On Sat, Oct 8, 2016 at 4:25 PM, Eric Mill <[email protected]> wrote: > To save folks a step, here's the link to the certlint repo, which contains > both executables: > > https://github.com/awslabs/certlint > > And Matt Palmer's asn1c refactoring work is here: > > https://github.com/awslabs/certlint/pull/38 > > -- Eric > > On Sat, Oct 8, 2016 at 5:59 PM, Peter Bowen <[email protected]> wrote: >> >> I pushed a major update to cablint/certlint today. It contains a >> massive performance improvement thanks to Matt Palmer who turned the >> asn1c code into an in-process extension, allowing replacement of >> numerous fork/exec calls per certificate. >> >> This has moved the performance on my test system to 596 certificates >> per second from a single process. The old version processed 49 >> certificates per second on the same hardware. >> >> In addition to performance improvements, it adds some new checks and >> has finer grained error messages for certain errors. These should >> resolve many of the reports of valid certificates reporting incorrect >> errors. >> >> Thanks, >> Peter >> _______________________________________________ >> dev-security-policy mailing list >> [email protected] >> https://lists.mozilla.org/listinfo/dev-security-policy > > > > > -- > konklone.com | @konklone _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy

