On Tue, 2003-04-01 at 11:23, Michael Bell wrote:
> Now I have the next problem. OpenCA::OpenSSL and OpenCA::OpenSSL::Fast
> need less than 0.03 seconds to completely parse 20 requests but
> OpenCA::REQ still need 1.2 seconds. So I checked the module again for
> some optimizations. The result is that Parse::ReqDescent needs up to 80
> percent of the time. I have no idea why it takes so long and how we can
> solve this problem.
I can not help you here, I haven't looked at ReqDescent... but I will
take a look...
The sad thing is I couldn't test OpenSSL::Fast, because I don't know how
to use it.. it is not documented and I don't understand XS.
Also, it won't compile in my system:
cc -c -I. -I/usr/local/ssl/include -DDEBIAN -fno-strict-aliasing
-I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -O2
-DVERSION=\"0.02\" -DXS_VERSION=\"0.02\" -fPIC
-I/usr/lib/perl/5.6.1/CORE -DPERL5 Fast.c
Fast.xs: In function `XS_OpenCA__OpenSSL__PKCS10_attributes':
Fast.xs:1239: structure has no member named `single'
make: *** [Fast.o] Error 1
I had to change line 1239 in Fast.xs (i don't know exactly what I'm
doing, but it compiled! :))
if (a->single)
to
if (a->value.single)
but after that... how do I use the library????
> >>> - I think private keys should be handled in a way similar to X509,
> >>>there is something already done in the proyect?
> >>No.
> > What do you think about it? You consider it good/necessary/unuseful?
> The question is what do you want to do with the keys? X509 and REQ etc.
> were created because they are core objects of a CA. If you have to
> handle a lot of keys then it makes sense. We store the keys in the
> request and x509 objects too.
the problem is: a. private keys do not belong to X509 nor to requests,
they could be in the same file, but aren't part of the structures (nor
desirable to be there!); b. by storing keys as pem-encoded data, you can
not have opaque processing of them, to retrieve information as key size,
fingerprint, etc.; and c. it is not nice :-)
-------------------------------------------------------
This SF.net email is sponsored by: ValueWeb:
Dedicated Hosting for just $79/mo with 500 GB of bandwidth!
No other company gives more support or power for your dedicated server
http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel
