View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0004635GNUnetGNSpublic2016-08-31 15:492019-02-28 10:17
Reporterschanzen Assigned Toschanzen Due Date
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status closedResolutionno change required 
Product VersionGit master 
Target Version0.11.0Fixed in Version0.11.0 
Summary0004635: GNS proxy cURL certificate validations is very slow
DescriptionAccessing SSL pages (especiall "heavy" pages such as youtube) through the proxy (no GNS, no TLSA) is very slow and results in very hight CPU load. Eventually leading to timeouts on the SOCKS side.
No sure if cURL is really the culprit, have not been able to track it down.
Steps To ReproduceTry to go to https://google.com or any other https page through the proxy.
With CURLOPT_VERBOSE you will be that cURL is "hanging" for a significant time (~seconds) at:
snip
---
* found 169 certificates in /etc/pki/tls/certs/ca-bundle.crt
* This GnuTLS does not support SRP
* server certificate verification OK
HERE
--snip

before continuing.
TagsNo tags attached.

Activities

schanzen

2018-06-24 17:44

administrator   ~0013074

This is no longer valid in current proxies

Issue History

Date ModifiedUsernameFieldChange
2016-08-31 15:49schanzenNew Issue
2016-09-22 18:07Christian GrothoffSeveritymajor => feature
2016-09-22 18:13Christian GrothoffSeverityfeature => minor
2017-02-26 00:45Christian GrothoffSeverityminor => feature
2018-06-24 17:44schanzenAssigned To => schanzen
2018-06-24 17:44schanzenStatusnew => resolved
2018-06-24 17:44schanzenResolutionopen => no change required
2018-06-24 17:44schanzenNote Added: 0013074
2019-02-12 08:20Christian GrothoffTarget Version => 0.11.0
2019-02-20 11:24Christian GrothoffFixed in Version => 0.11.0
2019-02-28 10:17Christian GrothoffStatusresolved => closed