On Fri, May 10, 2002 at 05:51:04PM +0100, Noel O'Kelly wrote:
> We have a report of a  problem from 2.8.6 onwards due to a change in the
> seeding of the PRNG which halves the 
> performance of SSL requests. Any update on this ???

Hi, here's the fix we're using...

Submitted by: Nalin Dahyabhai <[EMAIL PROTECTED]>

--- mod_ssl/pkg.sslmod/ssl_engine_rand.c
+++ mod_ssl/pkg.sslmod/ssl_engine_rand.c
@@ -156,6 +156,9 @@
                  */
                 if (ap_scoreboard_image != NULL && SCOREBOARD_SIZE > 16) {
                     m = ((SCOREBOARD_SIZE / 2) - 1);
+                    if (m > 1024) {
+                        m = 1024;
+                    }
                     n = ssl_rand_choosenum(0, m);
                     RAND_seed(((unsigned char *)ap_scoreboard_image)+n, m);
                     nDone += m;

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to