Performance Issue With OpenSSL 1.1.1c

[Tomas Mraz]

On Tue, 2019-05-28 at 10:39 -0700, Jay Foster wrote:
> I built OpenSSL 1.1.1c from the recent release, but have noticed
> what 
> seems like a significant performance drop compared with 1.1.1b.  I 
> notice this when starting lighttpd.  With 1.1.1b, lighttpd starts in
> a 
> few seconds, but with 1.1.1c, it takes several minutes.
> 
> I also noticed that with 1.1.1b, the CFLAGS automatically included 
> '-Wall -O3', but with 1.1.1c, '-Wall -O3' is no longer included in
> the 
> CFLAGS.  was this dropped?  I  added '-Wall -O3' to the CFLAGS, but
> this 
> did not seem to have any affect on the performance issue
> (unrelated?).
> 
> This is for a 32-bit ARM build.

To workaround the /dev/random blocking issue, you can just add:

-DDEVRANDOM="\"/dev/urandom\""

as a parameter to ./Configure

This will remove the special handling of /dev/urandom and /dev/random
in 1.1.1c.

-- 
Tomáš Mráz
No matter how far down the wrong road you've gone, turn back.
                                              Turkish proverb
[You'll know whether the road is wrong if you carefully listen to your
conscience.]