[ 
https://issues.apache.org/jira/browse/SOLR-5776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13973601#comment-13973601
 ] 

Hoss Man commented on SOLR-5776:
--------------------------------

bq. Since we need no security with SSL, doesn't it make sense to have all this 
just be a no op and have the best performance?

I don't think so?  

We still want some psuedo-randomness in the SSL, otherwise we might encounter 
some bug where it doesn't work, but we don't know because the SSL layer is 
always going down a certain code path that bypasses the bug because it's 
(Null)SecureRandom is _always_ returning 0/NUL/false from 
getInt/getBytes/getBoolean

We want to bypass the expensive entropy step, but we shouldn't bypass the 
inherient psuedo-randomness of SSL ... otherwise why not bypass all of the 
lucene randomization framework?

(if anything, SSLTestConfig should probably seed 
{{SecureRandom.getInstance("SHA1PRNG")}} with bytes it gets from 
{{LuceneTestFramework.random()}})

> Look at speeding up using SSL with tests.
> -----------------------------------------
>
>                 Key: SOLR-5776
>                 URL: https://issues.apache.org/jira/browse/SOLR-5776
>             Project: Solr
>          Issue Type: Test
>            Reporter: Mark Miller
>            Assignee: Mark Miller
>             Fix For: 4.9, 5.0
>
>         Attachments: SOLR-5776.patch, SOLR-5776.patch
>
>
> We have to disable SSL on a bunch of tests now because it appears to sometime 
> be ridiculously slow - especially in slow envs (I never see timeouts on my 
> machine).
> I was talking to Robert about this, and he mentioned that there might be some 
> settings we could change to speed it up.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to