[openssl-users] Multithreading: Global locks causing bottleneck in parallel SSL_write calls

[Benjamin Kaduk]

On 04/12/2017 05:54 AM, dipakgaigole wrote:
> Hi,
>  
> I have a windows multi-threaded SSL server application which handles
> each client request in a new thread. The Server handles different
> types of requests. One of the request type is like “send file” where
> server thread has to read a file from local filesystem and send the
> content to the client.
> Server configurations:
>                 FIPS: Enabled
>                 SSL Protocol: TLSv1.2
>                 Cipher: AES256-SHA

The OpenSSL PRNG story is currently not so great, yes.
But maybe you should try without FIPS, and also with a different
cipher?  AES256-SHA is both CBC and SHA1, neither of which is really a
current best practice.

-Ben
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20170412/e7d9010d/attachment-0001.html>