Uploaded image for project: 'SignServer'
  1. SignServer
  2. DSS-2263

Increase performance for key generation when P11NG is used

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 5.6.0.Final
    • Component/s: Core Framework
    • Labels:
      None
    • Stakeholder:
      Sales
    • Issue discovered during:
      Customer
    • Sprint:
      SignServer-Sprint-135

      Description

      When P11NG is used for key generation a large number of PKCS#11 calls are performed for the signing of the dummy certificate. This can slow down key generation especially for the case when a network HSM is used and its PKCS#11 driver is not caching C_SignUpdate calls (or hashing locally).

      Use a BufferingContentSigner for this case to increase performance by reducing the number of calls needed.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              markus Markus Kilås
              Reporter:
              markus Markus Kilås
              Verified by:
              Marcus Lundblad
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 1 hour Original Estimate - 1 hour
                  1h
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 1 hour, 8 minutes
                  1h 8m