[gnutls-devel] GnuTLS | gnutls_x509_trust_list_add_system_trust() is extremely slow (#1528)

[Read-only notification of GnuTLS library development activities]

Daiki Ueno commented: https://gitlab.com/gnutls/gnutls/-/issues/1528#note_1778108934

If the trust store is only backed by PKCS#11, the certificate lookup is deferred to the p11-kit-trust.so, so I would say it doesn't make sense to call `gnutls_x509_trust_list_add_system_trust` more than once.

For the slowness of the first time invocation, there's indeed a room for improvement; GnuTLS only needs the number of CA certificates in the trust store, while it tries to retrieve everything.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1528#note_1778108934
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20240218/f98f7dcf/attachment-0001.html>