use NSS only on the socket thread in NSSCertDBTrustDomain::GetCertTrust and FindIssuer
Categories
(Core :: Security: PSM, enhancement, P1)
Tracking
()
People
(Reporter: keeler, Assigned: keeler)
References
(Blocks 1 open bug)
Details
(Whiteboard: [psm-assigned])
Attachments
(1 file)
|
(deleted),
text/x-phabricator-request
|
Details |
See bug 1689728. This will address NSSCertDBTrustDomain::GetCertTrust and NSSCertDBTrustDomain::FindIssuer.
|
Assignee | |
Comment 1•4 years ago
|
||
See bug 1689728. To avoid contention on NSS resources and thread-safety issues,
this patch dispatches synchronous events to the socket thread in
NSSCertDBTrustDomain::GetCertTrust and FindIssuer to gather information from
NSS rather than using NSS directly on the cert verification threads.
|
||
Comment 3•4 years ago
|
||
| bugherder | ||
|
||
Comment 4•4 years ago
|
||
| backout | ||
Backed out for 87 due to bug 1691898:
https://hg.mozilla.org/releases/mozilla-beta/rev/6f195189b558607afe45dafbde29a4912bc1bee6
|
||
Comment 5•4 years ago
|
||
Bug 1697218 describes the regressions we are seeing on other live site tests.
We should be able to see improvements to this change reflected in Fenix nightly on this dashboard:
https://arewefastyet.com/androidPixel2/cold-page-load-live/overview?numDays=60
(The site can be really slow - that's being improved)
|
||
Comment 6•4 years ago
|
||
| backout | ||
Backed out from Beta 88 again due to bug 1691898.
https://hg.mozilla.org/releases/mozilla-beta/rev/8f1fac2611a4
Description
•