All,
We are using openssl-0.9.8e_WIN32 with Axis to connect the Webserivce using
the https end point. We resently upgrade the servers to windows 2008 R2
servers from 2003. The application takes 30-50sec more on windows 2008 R2
servers. I found  SSL_connect() API is taking more time on 2008 servers.
Below code takes longer time.  I think handshake with a server is takking
more time. Anyone has solution to this issue?. Is the windows 2008 server
issue or we need to replace openSLL version. i tried the .9.8g as well. 

bool HTTPSSLChannel::
OpenSSL_Open()
{
    SSL_METHOD *    req_method = SSLv23_client_method();
    bool            bSuccess = (bool) AXIS_FAIL;
    unsigned long   iSSLErrorIndex = 0;

    m_sslContext = SSL_CTX_new( req_method);
    if( !m_sslContext)
    {
        iSSLErrorIndex = ERR_get_error();

        // OpenSSL documents that this must be at least 120 bytes long.
        char    szSSLErrorBuffer[120];
        ERR_error_string( iSSLErrorIndex, szSSLErrorBuffer);
        m_LastError = szSSLErrorBuffer;

        CloseChannel();       
        return bSuccess;
    }
    SSL_CTX_set_verify( m_sslContext,
                        SSL_VERIFY_NONE, // SSL_VERIFY_PEER 
                        cert_verify_callback);
    // Lets make an SSL structure
    m_sslHandle = SSL_new( m_sslContext);

    SSL_set_connect_state( m_sslHandle);
    // pass the raw socket into the SSL layers
    SSL_set_fd( m_sslHandle, m_Sock);
    ERR_clear_error();

    int ret = SSL_connect( m_sslHandle);

    //   1  is fine
    //   0  is "not successful but was shut down controlled"
    //  <0  is "handshake was not successful, because a fatal error
occurred"
    if( ret <= 0)
    {
        OpenSSL_SetSecureError(ret);
        CloseChannel();
    }
    else
    {
        bSuccess = (bool) AXIS_SUCCESS;
    }

    return bSuccess;
}



--
View this message in context: 
http://openssl.6102.n7.nabble.com/OpenSSL-0-9-8e-WIN32-is-very-slow-on-windows-2008-R2-server-tp46266.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to