hc-httpclient-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From jhinckel <jhinc...@terra.com.br>
Subject Re: 5 seconds to handshake with https connection
Date Tue, 14 Dec 2010 19:06:23 GMT

I find out the problem cause. The "Net Bios" try resolve IP to hostname.
Deactivate "Net Bios" on Windows the problem does not occur. The new
Httpclient changed about this?


jhinckel wrote:
> 
> Why the 4.1 version load several certificates and not in 3.0? Another
> detail is that in 4.0.1 the delay time was 20 seconds, and in 4.1 reduced
> to 5?
> 
> 
> olegk wrote:
>> 
>> On Mon, 2010-08-30 at 14:33 -0700, jhinckel wrote:
>>> What I discovered were different in the logs several messages like:
>>> 
>>> trigger seeding of SecureRandom
>>> done seeding SecureRandom
>>> keystore is:
>>> KeyStore type is: jks
>>> KeyStore provider is:
>>> init keystore
>>> init keymanager of type SunX509
>>> truststore is: E: \ Program Files \ Java \ jdk1.6.0_14 \ jre \ lib \
>>> security \ cacerts
>>> truststore type is: jks
>>> truststore provider is:
>>> init truststore
>>> adding the trusted cert:
>>>   Subject: CN = SwissSign Platinum CA - G2, O = SwissSign AG, C = CH
>>>   Issuer: CN = SwissSign Platinum CA - G2, O = SwissSign AG, C = CH
>>>   Algorithm: RSA; Serial number: 0x4eb200670c035d4f
>>>   Valid from Fri Oct 25 05:36:00 GMT-03: 00 2006 Until Sat Oct 25
>>> 05:36:00
>>> GMT-03: 00 2036
>>> 
>>> adding the trusted cert:
>>> ...
>>> adding the trusted cert:
>>> ...
>>> 
>>> preceding the passage which is common to both:
>>> 
>>> trigger seeding of SecureRandom
>>> done seeding SecureRandom
>>> main, setSoTimeout (60000) called (after this line the system wait 5
>>> seconds)
>>> %% No cached client session
>>> *** ClientHello, TLSv1
>>> 
>> 
>> I do not have any rational explanation for this (mis)behavior. You may
>> want to try out different SSL context initialization strategies (for
>> instance, by using older SSLv3 algorithm instead of TLSv2, pre-seeding
>> SecureRandom, and so on) and see if that makes any difference.
>> 
>> Oleg
>> 
>> 
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
>> For additional commands, e-mail: httpclient-users-help@hc.apache.org
>> 
>> 
>> 
> 
> 

-- 
View this message in context: http://old.nabble.com/5-seconds-to-handshake-with-https-connection-tp29555624p30457785.html
Sent from the HttpClient-User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org


Mime
View raw message