[gnutls-help] gnutls + courier-imap => very slow

[Daniel Kahn Gillmor]

On 01/09/2014 11:46 PM, Sam Varshavchik wrote:
> Lenz Weber writes:
> 
>> I'm currently investigating some serious performance problems when using
>> courier-0.66.1ubuntu4 in combination with
>> gnutls-3.0.11+really2.12.14-5ubuntu3.5, which would be the usual
>> combination if one were to compile courier using the --with-gnutls
>> config flag in the lastest Ubuntu LTS version 12.04.
 [...]
> However, I happened to have sources of 3.2.7 handy, and from poking
> around, those syscalls appear to be coming out of
> wrap_nettle_rnd_refresh() in lib/nettle/rnd.c, which appears to have
> something to do with reseeding an internal random number pool. It looks
> like there's a lot of work happening here; and I don't quite follow why
> that needs to be done for each call to gnutls_record_send(); but that's
> as far as I could go, with what I know.

the ubuntu version Lenz mentioned is "really2.12.14", which means it's
built against gcrypt, not nettle, iiuc.  sorry i don't have more help to
offer on this at the moment, but just wanted to avoid anyone doing a
goose chase down into the nettle code for this situation.

	--dkg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1027 bytes
Desc: OpenPGP digital signature
URL: </pipermail/attachments/20140110/9bea1753/attachment-0001.sig>