Closed Bug 674148 Opened 13 years ago Closed 13 years ago

De-serialize certificate chain validations (nsCertVerificationThread)

Categories

(Core :: Security: PSM, defect)

Product:
Core
Component:
Security: PSM
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WORKSFORME
Milestone:
mozilla8

People

(Reporter: briansmith, Assigned: briansmith)

Details

+++ This bug was initially created as a clone of Bug #511393 +++ Kai noted that if we remove the bottleneck created by the SSL thread by fixing Bug 674147, SSL traffic that does a full handshake will still be serialized during certificate path validation in the single nsCertVerificationThread. This bug is about allowingn sCertVerificationThread to validate multiple certificate chains in parallel, either by by using multiple threads (as proposed for nsSSLThread in bug 511393) or by using the non-blocking mode of libpkix.
Assignee: nobody → bsmith
Target Milestone: --- → mozilla8
It was trivial for me to add multi-threaded support for SSL server cert validation in the patches for bug 674147. Assuming those patches stick, we can resolve this as a dup of bug 674147.
bug 674147 landed, with 5 SSL cert chain verification threads.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.