[Help-gnutls] Re: gnutls_handshake() is slow and is a big lock

[Eric Leblond]

Le samedi 29 juillet 2006 à 14:28 +0200, Nikos Mavrogiannopoulos a
écrit :
> On Sat 29 Jul 2006 14:17, Eric Leblond wrote:
> > Le samedi 29 juillet 2006 à 14:03 +0200, Nikos Mavrogiannopoulos a
> > > > If you use different gnutls_session objects in each thread, I
> > > > think this should work.  But I haven't tested it.  Maybe you need
> > > > extra copies of other structures too, used by the gnutls_session.
> > >
> > > Yes, if a gnutls_session object is only accessed by a single thread
> > > it works (of course the locks for libgcrypt need to be set up). The
> > > hydra web server (http://hydra.hellug.gr) uses gnutls and works
> > > pretty much ok.
> >
> > Our test have shown that this work well in streaming mode but not
> > during handshake.
> 
> Do you change the credential structures during handshakes? They have to
> be initialized and stay fixed during any handshakes.

No they are fixed on the server. You can check the source of the server
at :
http://nufw.org/doxygen/nuauth_2tls_8c-source.html#l00209

BR,
Eric