On Thursday January 18th 2007 Yo BZH wrote:

> Hello all,
> 
> I am trying to use Openssl SMIME finctionnalities on Aix, ans I noticed a
> limitation of Openssl compared to Solaris. This limitation is related to the
> maximum file size of a file to process. After a few tests, I realised that
> this is an issue with memory. When I change the ulimit -s to unlimited on
> AIX, then I can process bigger files, but the limit is still around 80
> Mbytes. I need to process 200 Mbytes files.
> 
> Any ideas what could cause this ? What is different from Solaris with memory
> allocation ?

Your Solaris machine probably has more internal memory and/or a larger
swapfile?

The problem is that especially with S/MIME encryption and also with
signing internal attachments, OpenSSL needs to read the whole file into
the working memory. So if you have a big file or limitations in
resources this might fail. There is no principal difference between the
Solaris and AIX implementations.

There is experimental support for this problem in the 0.9.9 branch of
OpenSSL. If you could test that I'm sure it would be appreciated.

Sometimes using compression before signing or encrypting helps limit the
amount of memory needed, but it depends on your S/MIME requirements and
the data involved.
-- 
Marco Roeland
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to