[gnutls-devel] GnuTLS | gnutls_x509_trust_list_add_system_trust() is extremely slow (#1528)

[Read-only notification of GnuTLS library development activities]

Michael Catanzaro commented on a discussion: https://gitlab.com/gnutls/gnutls/-/issues/1528#note_1778173477

> If the trust store is only backed by PKCS#11, the certificate lookup is deferred to the p11-kit-trust.so, so I would say it doesn't make sense to call `gnutls_x509_trust_list_add_system_trust` more than once.

I've reduced it to twice. Can't get it down to only once because GTlsDatabaseGnutls needs to keep a gnutls_x509_trust_list_t for itself, but gnutls_certificate_credentials_t takes ownership. There's also no way to duplicate an existing gnutls_x509_trust_list_t.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1528#note_1778173477
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20240218/f8f2319a/attachment.html>