summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/evp/p_lib.c
diff options
context:
space:
mode:
authorbeck <>2024-04-08 23:46:21 +0000
committerbeck <>2024-04-08 23:46:21 +0000
commit6a993ea0b1a8e5ba915e093a2eca5dc9fba06c74 (patch)
treea514bf75907bdd1906b32c4e2da374c0ea1ba065 /src/lib/libcrypto/evp/p_lib.c
parent0164389f0b72283c34063736f590518874ffc3c8 (diff)
downloadopenbsd-6a993ea0b1a8e5ba915e093a2eca5dc9fba06c74.tar.gz
openbsd-6a993ea0b1a8e5ba915e093a2eca5dc9fba06c74.tar.bz2
openbsd-6a993ea0b1a8e5ba915e093a2eca5dc9fba06c74.zip
Remove notBefore and notAfter cacheing.
This cache was added because our time conversion used timegm() and gmtime() which aren't very cheap. These calls were noticably expensive when profiling things like rpki-client which do many X.509 validations. Now that we convert times using julien seconds from the unix epoch, BoringSSL style, instead of a julien days from a Byzantine date, we no longer use timegm() and gmtime(). Since the julien seconds calculaitons are cheap for conversion, we don't need to bother caching this, it doesn't have a noticable performance impact. While we are at this correct a bug where x509_verify_asn1_time_to_time_t was not NULL safe. Tested for performance regressions by tb@ and job@ ok tb@ job@
Diffstat (limited to 'src/lib/libcrypto/evp/p_lib.c')
0 files changed, 0 insertions, 0 deletions