httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dr Stephen Henson <shen...@opensslfoundation.com>
Subject Re: Fwd: [users@httpd] Performance drop in 2.4.7 versus 2.4.6
Date Fri, 21 Feb 2014 13:32:56 GMT
On 21/02/2014 13:13, Dr Stephen Henson wrote:
> On 21/02/2014 13:02, Jeff Trawick wrote:
>> Including dev@httpd.apache.org...
>>
>> Is anybody else seeing the same behavior? Looking at the documentation, 2.4.7
>> has gained some performance improvements, but I’m seeing something different on
>> my end.____
>>
> 
> Perhaps it's the increased DH parameter size? If it has increased from 1024 bits
> to 2048 that would have a significant effect.
> 
> OpenSSL 1.0.2 s_client can help check this, if you do:
> 
> openssl s_client -connect www.host.com:443
> 

Correction, since the site is using OpenSSL 1.0.1f that command by itself may
not be sufficient as ECDH is most likely to be used by default so it would need:

openssl s_client -connect www.host.com:443 -cipher DH

Steve.
-- 
Dr Stephen Henson. OpenSSL Software Foundation, Inc.
1829 Mount Ephraim Road
Adamstown, MD 21710
+1 877-673-6775
shenson@opensslfoundation.com

Mime
View raw message