Michael, Michael Bell wrote:
first thanks for these real world tests.
no problem, this is an important area for the future of OpenCA as a product for Local Government and larger organisations.
The reason is simple and inacceptable for high volume systems: This while loop iterates over all (!!!) existing certificates.
OK, this is what I thought looking at the results.
The best idea to solve this would be a database table with the following stuff:<--snip-->
This is actually impossible because we cannot(?) remove the DBM support from 0.9.2 shortly before the release.
OK.
The major problem in the background is that we support dataexchange with one root node and several children. So the upload is trivial but the enrollment is horrible because you must check the dependencies for all "client" nodes. So the export performance is linear with the number of client "nodes". We can only speedup this problem by performing the dataexchange always between explicit pairs of nodes. This would reduce the query to
<--snip-->
I like the idea of modifying the screens to allow data exchange between specific pairs of nodes, e.g.
Enrol to a lower level CA Node --> All CA Node --> RA Node 1 CA Node --> RA Node 2
At the moment we only use one RA node, so it would not help us much, but this idea would make future multiple node environments much easier to manage (in terms of time to perform data exchange).
Summary: We lose the most performance today during performing SQL stuff in Perl. There is no way (because of DBM) to send direct SQL statements to the database backend.
Finally we have two options:
1. Release 0.9.2 very soon (within days or weeks) and then remove the DBM support.
2. Delay 0.9.2 and remove DBM support before the release
I say go with Option 1. We need to release a working version of OpenCA with the new functions that 0.9.2 gives us. This will be the last version with DBM support.
We then discuss the direction of 0.9.3 at the Developers conference and on this list, setting priorities for development and testing.
Chris...
-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM. Deadline: Sept. 13. Go here: http://sf.net/ppc_contest.php
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel
