CRL Race condition

[prakash babu]

Hello all,              There has been a tremendous performance during CRL check between 0.9.7d and 0.9.7e                      I measured the time for checking the crl with 1,00,000 entries using the following command                     time openssl verify -crl_check -CAfile $ssl_crl_dir/chain $ssl_dir/bin/${demoCA}/newcerts/$serial                     The elapsed time is                     0.9.7d   0m1.14s           0.9.7e   0m0.69s                     1. What is the reason for the improvement in performance ?                     2. There has been an new encoding element added to the X509_crl_info_st structure. What is it used for ?                      3. Are we caching the encoded CRL structure ?                      4. Why do we write lock while  sorting the crl ?        Thanks, Prakash Do you Yahoo!? Yahoo! Mail - Helps protect you from nasty viruses.