httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Masaoki Kobayashi <masa...@techfirm.co.jp>
Subject [PATCH] SSL patch for ab (ApacheBench)
Date Tue, 10 May 2005 05:13:47 GMT
This patch modifies the support/ab.c to handle SSL/TLS
properly.

The current implementation in 2.0.54 seems to be broken
because it dumps core when I compile it with "-DUSE_SSL".
Even when I go back to 2.0.39, it still has many problems.

i.e.
- Asynchronous I/O does not work with SSL, which means
  only one slow connection prevents all other concurrent
  connections from proceeding.
- It sleeps one second for each SSL connections during
  SSL handshake.
- SIGSEGV occurs with "-v 4" because of the buffer
  overflow inside ssl_print_cert_info().
- Cannot specify either protocol version or cipher suites.

This patch makes ab work with asynchronous I/O even in
SSL/TLS, while it introduces 2 more options for SSL/TLS.

  -Z ciphersuite  Specify SSL/TLS cipher suite (See openssl ciphers)
  -f protocol     Specify SSL/TLS protocol (SSL2, SSL3, TLS1, or ALL)

  Example:
    ab -f SSL3 -Z DES-CBC3-SHA -n 1000 -c 100 https://server/

This patch also includes the modification for configure.in
to set "-DAB_USE_SSL" automatically when you configure
apache with "--enable-ssl".  You have to run buildconf
after applying this patch, of course.

--
Masaoki Kobayashi
<masaoki@techfirm.co.jp>

Mime
View raw message