View Issue Details

IDProjectCategoryView StatusLast Update
0004635GNUnetGNSpublic2019-02-28 11:17
Reporterschanzen Assigned Toschanzen  
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status closedResolutionno change required 
Product VersionGit master 
Target Version0.11.0Fixed in Version0.11.0 
Summary0004635: GNS proxy cURL certificate validations is very slow
DescriptionAccessing SSL pages (especiall "heavy" pages such as youtube) through the proxy (no GNS, no TLSA) is very slow and results in very hight CPU load. Eventually leading to timeouts on the SOCKS side.
No sure if cURL is really the culprit, have not been able to track it down.
Steps To ReproduceTry to go to https://google.com or any other https page through the proxy.
With CURLOPT_VERBOSE you will be that cURL is "hanging" for a significant time (~seconds) at:
snip
---
* found 169 certificates in /etc/pki/tls/certs/ca-bundle.crt
* This GnuTLS does not support SRP
* server certificate verification OK
HERE
--snip

before continuing.
TagsNo tags attached.

Activities

schanzen

2018-06-24 19:44

administrator   ~0013074

This is no longer valid in current proxies

Issue History

Date Modified Username Field Change
2016-08-31 17:49 schanzen New Issue
2016-09-22 20:07 Christian Grothoff Severity major => feature
2016-09-22 20:13 Christian Grothoff Severity feature => minor
2017-02-26 01:45 Christian Grothoff Severity minor => feature
2018-06-24 19:44 schanzen Assigned To => schanzen
2018-06-24 19:44 schanzen Status new => resolved
2018-06-24 19:44 schanzen Resolution open => no change required
2018-06-24 19:44 schanzen Note Added: 0013074
2019-02-12 09:20 Christian Grothoff Target Version => 0.11.0
2019-02-20 12:24 Christian Grothoff Fixed in Version => 0.11.0
2019-02-28 11:17 Christian Grothoff Status resolved => closed