[
https://issues.apache.org/jira/browse/TS-2058?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14216645#comment-14216645
]
Susan Hinrichs commented on TS-2058:
------------------------------------
With the addition of plugin API in TS-3006 it becomes feasible to do this
certificate loading via plugin. That code commit added an experimental plugin
ssl_cert_loader which dynamically loads certificates on an as needed basis. As
with James' patch, this moves the certificate loading from blocking the process
start up.
> Traffic server fails to start with lots of SNI ssl certs defined
> ----------------------------------------------------------------
>
> Key: TS-2058
> URL: https://issues.apache.org/jira/browse/TS-2058
> Project: Traffic Server
> Issue Type: Bug
> Components: Performance, SSL
> Reporter: Kris Lindgren
> Assignee: Susan Hinrichs
> Attachments: TS-2058-hacked-up.diff
>
>
> Running into an issue with SNI under 3.2.4 - with 100k ssl certs defined in
> ssl_multicert.config with the following format: ssl_cert_name=<cert> Traffic
> server will never start. It looks like it keeps getting killed by
> traffic_cop.
> It looks like succesfull startup will take ~2minutes for 100k ssl certs on my
> machine and about 15 seconds for 40k ssl certs. I would like to try to get
> to one million ssl certs defined with traffic server able to start
> successfully. Anything that could be done to increase the speed and allow
> that amount of SSL certs defined to start successfully would be much
> appreciated.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
