All,
We are using openssl-0.9.8e_WIN32 with Axis to connect the Webserivce using
the https end point. We resently upgrade the servers to windows 2008 R2
servers from 2003. The application takes 30-50sec more on windows 2008 R2
servers. I found SSL_connect() API is taking more time on 2008 servers.
Below code takes longer time. I think handshake with a server is takking
more time. Anyone has solution to this issue?. Is the windows 2008 server
issue or we need to replace openSLL version. i tried the .9.8g as well.
bool HTTPSSLChannel::
OpenSSL_Open()
{
SSL_METHOD * req_method = SSLv23_client_method();
bool bSuccess = (bool) AXIS_FAIL;
unsigned long iSSLErrorIndex = 0;
m_sslContext = SSL_CTX_new( req_method);
if( !m_sslContext)
{
iSSLErrorIndex = ERR_get_error();
// OpenSSL documents that this must be at least 120 bytes long.
char szSSLErrorBuffer[120];
ERR_error_string( iSSLErrorIndex, szSSLErrorBuffer);
m_LastError = szSSLErrorBuffer;
CloseChannel();
return bSuccess;
}
SSL_CTX_set_verify( m_sslContext,
SSL_VERIFY_NONE, // SSL_VERIFY_PEER
cert_verify_callback);
// Lets make an SSL structure
m_sslHandle = SSL_new( m_sslContext);
SSL_set_connect_state( m_sslHandle);
// pass the raw socket into the SSL layers
SSL_set_fd( m_sslHandle, m_Sock);
ERR_clear_error();
int ret = SSL_connect( m_sslHandle);
// 1 is fine
// 0 is "not successful but was shut down controlled"
// <0 is "handshake was not successful, because a fatal error
occurred"
if( ret <= 0)
{
OpenSSL_SetSecureError(ret);
CloseChannel();
}
else
{
bSuccess = (bool) AXIS_SUCCESS;
}
return bSuccess;
}
--
View this message in context:
http://openssl.6102.n7.nabble.com/OpenSSL-0-9-8e-WIN32-is-very-slow-on-windows-2008-R2-server-tp46266.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
