Re: [openssl-users] OpenSSL performance issue

2014-12-19 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf > Of Dr. Stephen Henson > Sent: Friday, December 19, 2014 11:37 > To: openssl-users@openssl.org > Subject: Re: [openssl-users] OpenSSL performance issue > > On Fri, Dec 19, 2014, Dave Thompson wrote: &

Re: [openssl-users] OpenSSL performance issue

2014-12-19 Thread Dr. Stephen Henson
gt; > Sent: Thursday, December 18, 2014 16:36 > > > To: openssl-users@openssl.org > > > Subject: Re: [openssl-users] OpenSSL performance issue > > > > > > So the differnce here is that jave picks a DHE ciphersuite while > otherwise > > you > > >

Re: [openssl-users] OpenSSL performance issue

2014-12-19 Thread Matt Caswell
On 19/12/14 15:17, Brian Reichert wrote: > On Fri, Dec 19, 2014 at 02:30:07AM +0530, Prabhat Puroshottam wrote: >> As you can see the big time difference between the two executions - which >> actually involve the same application level data. The largest chunk of >> time is spent waiting for hand

Re: [openssl-users] OpenSSL performance issue

2014-12-19 Thread Brian Reichert
On Fri, Dec 19, 2014 at 02:30:07AM +0530, Prabhat Puroshottam wrote: > As you can see the big time difference between the two executions - which > actually involve the same application level data. The largest chunk of > time is spent waiting for handshake from *Proxy Server*. The response time >

Re: [openssl-users] OpenSSL performance issue

2014-12-19 Thread Jakob Bohm
On 19/12/2014 12:11, Jakob Bohm wrote: On 19/12/2014 00:10, Prabhat Puroshottam wrote: I am trying to summarize the problem again, since the previous mail seems confusing to some of you. It might help you quickly understand the problem I am facing: We have a product, where Client connects to Se

Re: [openssl-users] OpenSSL performance issue

2014-12-19 Thread Jakob Bohm
On 19/12/2014 00:10, Prabhat Puroshottam wrote: I am trying to summarize the problem again, since the previous mail seems confusing to some of you. It might help you quickly understand the problem I am facing: We have a product, where Client connects to Server (Proxy Server in my earlier mail).

Re: [openssl-users] OpenSSL performance issue

2014-12-19 Thread Dave Thompson
> From: openssl-users On Behalf Of Kurt Roeckx > Sent: Thursday, December 18, 2014 16:36 > On Fri, Dec 19, 2014 at 02:30:07AM +0530, Prabhat Puroshottam wrote: > > *** > > This is for *Client -> Agent* > > *** > [...] > >

Re: [openssl-users] OpenSSL performance issue

2014-12-19 Thread Dave Thompson
ssl.org > > Subject: Re: [openssl-users] OpenSSL performance issue > > > > So the differnce here is that jave picks a DHE ciphersuite while otherwise > you > > didn't. DHE gives you forward secrecy but is slower. > > And if DH parameters have not been set, Op

Re: [openssl-users] OpenSSL performance issue

2014-12-18 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf > Of Kurt Roeckx > Sent: Thursday, December 18, 2014 16:36 > To: openssl-users@openssl.org > Subject: Re: [openssl-users] OpenSSL performance issue > > So the differnce here is that jave picks a

Re: [openssl-users] OpenSSL performance issue

2014-12-18 Thread Prabhat Puroshottam
> Date: Thu, 18 Dec 2014 22:36:08 +0100 > From: k...@roeckx.be > To: openssl-users@openssl.org > Subject: Re: [openssl-users] OpenSSL performance issue > > On Fri, Dec 19, 2014 at 02:30:07AM +0530, Prabhat

Re: [openssl-users] OpenSSL performance issue

2014-12-18 Thread Prabhat Puroshottam
> Date: Thu, 18 Dec 2014 22:36:08 +0100 > From: k...@roeckx.be > To: openssl-users@openssl.org > Subject: Re: [openssl-users] OpenSSL performance issue > > On Fri, Dec 19, 2014 at 02:30:07AM +0530, Prabhat

Re: [openssl-users] OpenSSL performance issue

2014-12-18 Thread Salz, Rich
> I would like to understand why startHandshake() is taking so long. Somebody else pointed out the differences in ciphers. You should take the time to understand that message. ___ openssl-users mailing list openssl-users@openssl.org https://mta.openss

Re: [openssl-users] OpenSSL performance issue

2014-12-18 Thread Prabhat Puroshottam
I am trying to summarize the problem again, since the previous mail seems confusing to some of you. It might help you quickly understand the problem I am facing: We have a product, where Client connects to Server (Proxy Server in my earlier mail). Client is implemented in C and uses OpenSSL, whi

Re: [openssl-users] OpenSSL performance issue

2014-12-18 Thread Prabhat Puroshottam
> So the differnce here is that jave picks a DHE ciphersuite while > otherwise you didn't. DHE gives you forward secrecy but is > slower. Being relatively new to OpenSSL and security programming in general, obviously I need to read into these, but could it cause the delay in sending ServerHello

Re: [openssl-users] OpenSSL performance issue

2014-12-18 Thread Prabhat Puroshottam
> So the differnce here is that jave picks a DHE ciphersuite while > otherwise you didn't. DHE gives you forward secrecy but is > slower. Being relatively new to OpenSSL and security programming in general, obviously I need to read into these, but could it cause the delay in sending ServerHello by

Re: [openssl-users] OpenSSL performance issue

2014-12-18 Thread Prabhat Puroshottam
> Why do you say it shouldn't matter? The new Java proxy server is most likely > the cause. Do some packet captures, between Client<>Agent and Clinet<>Proxy. > L ook at the timing, and see if the client ends up waiting for packets from > the proxy. Sorry may be I wasn't able to convey it. The j

Re: [openssl-users] OpenSSL performance issue

2014-12-18 Thread Kurt Roeckx
On Fri, Dec 19, 2014 at 02:30:07AM +0530, Prabhat Puroshottam wrote: > *** > This is for *Client -> Agent* > *** [...] >     Version 3.1 [...] >     cipherSuite TLS_RSA_WITH_AES_256_CBC_SHA [...] > *

Re: [openssl-users] OpenSSL performance issue

2014-12-18 Thread Salz, Rich
> *Client* and *Agent* are implemented in C, while *Proxy Server* uses Java > code (This shouldn't really matter). But might be helpful for you to know. > The issue is, connecting *Client* to *Agent* is very fast (that is > relatively). > While connecting *Client* to *Proxy Server* is very slow -

[openssl-users] OpenSSL performance issue

2014-12-18 Thread Prabhat Puroshottam
Hi, I think my last email was somehow lost in transition between the mail servers so I am starting afresh if somebody can help. If you have already taken pains to read through this mail, kindly skip to the bottom of the mail. Thanks for your patience.   First let me state upfront that I am relati