AW: AW: Performance Issue With OpenSSL 1.1.1c

2019-06-04 Thread Dr. Matthias St. Pierre
Yay, there are some controversial discussions taking place on https://github.com/openssl/openssl/issues/9078 It would be great if you could join us and provide more details about the circumstances of your issue. In particular, information like kernel/os version and whether the significant

Re: AW: Performance Issue With OpenSSL 1.1.1c

2019-06-04 Thread Matthias St. Pierre
Hi, I opened an issue on GitHub to discuss this problem in more detail. https://github.com/openssl/openssl/issues/9078 It would be nice if you could join the discussion there. Matthias @Jay:  in particular I'm interested to learn, which linux version and distribution you were using. On

AW: Performance Issue With OpenSSL 1.1.1c

2019-05-29 Thread Dr. Matthias St. Pierre
Correction, Tomáš was correct: there is an ` # ifndef DEVRANDOM` surrounding the problematic code: https://github.com/openssl/openssl/blob/OpenSSL_1_1_1c/e_os.h#L25-L34 Neverthelesss, I still think this code needs to be changed, because the seeding should just work correctly out-of-the-box

AW: Performance Issue With OpenSSL 1.1.1c

2019-05-29 Thread Dr. Matthias St. Pierre
> To workaround the /dev/random blocking issue, you can just add: > > -DDEVRANDOM="\"/dev/urandom\"" > > as a parameter to ./Configure > > This will remove the special handling of /dev/urandom and /dev/random > in 1.1.1c. Tomáš, Jay, I'm afraid this suggestion won't help, because

Re: Performance Issue With OpenSSL 1.1.1c

2019-05-29 Thread Tomas Mraz
On Tue, 2019-05-28 at 10:39 -0700, Jay Foster wrote: > I built OpenSSL 1.1.1c from the recent release, but have noticed > what > seems like a significant performance drop compared with 1.1.1b. I > notice this when starting lighttpd. With 1.1.1b, lighttpd starts in > a > few seconds, but with

Re: Performance Issue With OpenSSL 1.1.1c

2019-05-29 Thread Steffen Nurpmeso
Jakob Bohm via openssl-users wrote in <23f8b94d-0078-af3c-b46a-929b9d005\ 4...@wisemo.com>: |On 28/05/2019 23:48, Steffen Nurpmeso wrote: |> Jay Foster wrote in <84571f12-68b3-f7ee-7896-c891a2e25...@roadrunner.com\ |> >: |>|On 5/28/2019 10:39 AM, Jay Foster wrote: |>|> I built OpenSSL 1.1.1c

Re: Performance Issue With OpenSSL 1.1.1c

2019-05-29 Thread Jakob Bohm via openssl-users
On 28/05/2019 23:48, Steffen Nurpmeso wrote: Jay Foster wrote in <84571f12-68b3-f7ee-7896-c891a2e25...@roadrunner.com>: |On 5/28/2019 10:39 AM, Jay Foster wrote: |> I built OpenSSL 1.1.1c from the recent release, but have noticed what |> seems like a significant performance drop compared

AW: Performance Issue With OpenSSL 1.1.1c

2019-05-29 Thread Dr. Matthias St. Pierre
> I think I have tracked down the change in 1.1.1c that is causing this. > It is the addition of the DEVRANDOM_WAIT functionality for linux in > e_os.h and crypto/rand/rand_unix.c.  lighttpd (libcrypto) is waiting in > a select() call on /dev/random.  After this eventually wakes up, it then >

Re: Performance Issue With OpenSSL 1.1.1c

2019-05-28 Thread Hal Murray
jayf0s...@roadrunner.com said: > I think I have tracked down the change in 1.1.1c that is causing this.  It > is the addition of the DEVRANDOM_WAIT functionality for linux in e_os.h and > crypto/rand/rand_unix.c.  lighttpd (libcrypto) is waiting in a select() call > on /dev/random. ... I

Re: Performance Issue With OpenSSL 1.1.1c

2019-05-28 Thread Dennis Clarke
I also noticed that with 1.1.1b, the CFLAGS automatically included '-Wall -O3', but with 1.1.1c, '-Wall -O3' is no longer included in the CFLAGS.  was this dropped?  I  added '-Wall -O3' to the CFLAGS, but this did not seem to have any affect on the performance issue (unrelated?). This is

Re: Performance Issue With OpenSSL 1.1.1c

2019-05-28 Thread Steffen Nurpmeso
Jay Foster wrote in <84571f12-68b3-f7ee-7896-c891a2e25...@roadrunner.com>: |On 5/28/2019 10:39 AM, Jay Foster wrote: |> I built OpenSSL 1.1.1c from the recent release, but have noticed what |> seems like a significant performance drop compared with 1.1.1b.  I |> notice this when starting

Re: Performance Issue With OpenSSL 1.1.1c

2019-05-28 Thread Jay Foster
On 5/28/2019 10:39 AM, Jay Foster wrote: I built OpenSSL 1.1.1c from the recent release, but have noticed what seems like a significant performance drop compared with 1.1.1b.  I notice this when starting lighttpd.  With 1.1.1b, lighttpd starts in a few seconds, but with 1.1.1c, it takes

Performance Issue With OpenSSL 1.1.1c

2019-05-28 Thread Jay Foster
I built OpenSSL 1.1.1c from the recent release, but have noticed what seems like a significant performance drop compared with 1.1.1b.  I notice this when starting lighttpd.  With 1.1.1b, lighttpd starts in a few seconds, but with 1.1.1c, it takes several minutes. I also noticed that with