Skip to content

Set verify locations in the initializer function only#3834

Merged
persiaAziz-zz merged 1 commit intoapache:masterfrom
persiaAziz-zz:verif
Jun 14, 2018
Merged

Set verify locations in the initializer function only#3834
persiaAziz-zz merged 1 commit intoapache:masterfrom
persiaAziz-zz:verif

Conversation

@persiaAziz-zz
Copy link
Copy Markdown
Contributor

No description provided.

@persiaAziz-zz persiaAziz-zz added this to the 9.0.0 milestone Jun 14, 2018
@persiaAziz-zz persiaAziz-zz self-assigned this Jun 14, 2018
@persiaAziz-zz persiaAziz-zz requested a review from shinrich June 14, 2018 18:41
@zwoop zwoop changed the title set verify locations in the initializer function only Set verify locations in the initializer function only Jun 14, 2018
@SolidWallOfCode
Copy link
Copy Markdown
Member

This is a performance tweak, so the overhead of setting / loading the verify locations is per certificate and not per connection.

Copy link
Copy Markdown
Member

@shinrich shinrich left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good. The trusted root locations are not overridable so only need to be loaded on initialization. Only the default locations or the specific locations should be loaded for a given CTX.

@persiaAziz-zz persiaAziz-zz merged commit 7fb12c0 into apache:master Jun 14, 2018
@zwoop
Copy link
Copy Markdown
Contributor

zwoop commented Jun 17, 2018

Cherry-picked to 8.0.x

@zwoop zwoop modified the milestones: 9.0.0, 8.0.0 Jun 17, 2018
@zwoop
Copy link
Copy Markdown
Contributor

zwoop commented Jun 17, 2018

@persiaAziz If you want this for 7.1.x, please make a PR against that branch (this doesn't cherry-pick cleanly).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants