[openssl-users] Doubt about OpenSSL library initialization in an HTTP client application

Jeffrey Walton noloader at gmail.com
Sat Dec 3 18:42:39 UTC 2016


> I'm trying to speed up the initialization of a legacy HTTP client
> application. Debugging that code, I found the following functions being
> called each application startup:
>
>   initialization
>     SSL_library_init()
>     SSL_load_error_strings()
>     OpenSSL_add_all_algorithms()
>     RAND_screen()
>
> however, the execution of RAND_screen()  spends about 3 seconds.

Also see https://wiki.openssl.org/index.php/Library_Initialization and
https://wiki.openssl.org/index.php/Random_Numbers#Windows_Issues.

The short of it is, you should stop relying on auto-initialization of
the RNG, and seed it yourself with a call to `RAND_add`.

Jeff


More information about the openssl-users mailing list