Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-5951

Add background pre-filling of public key blacklist to improve performance

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: EJBCA 6.8.0, EJBCA 6.9.0
    • Fix Version/s: None
    • Component/s: None
    • Labels:
      None

      Description

      After ECA-5948 blacklists there is a database check for every request, assuming they don't hit a blacklist entry. To improve performance and avoid the database check we could:

      • hava a background thread that pre-fills the blacklist (this can take time since the blacklist contains millions of objects)
      • when the blacklist is known to be filled, only check the cache

      Pre-requisites is that we know roughly how large the blacklists are. Check available sources.
      There should be an option to pre-fill blacklists or not. Blacklists should only be pre-filled if some black list validator is configured in the system.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              tomas Tomas Gustavsson
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated: