Package: wget Version: 1.13.4-3 Severity: important Dear Maintainer,
I'm using the munin http_loadtime plugin which in turn uses wget to measure the loadtime of websites. While this plugin ususally shows results well below one second, on updated Debian systems the performance drops considerably. It seems to be realted to the switch from openssl to gnutls. Quick: wget -p --no-cache --delete-after http://www.scc.kit.edu/ Slow: wget -p --no-cache --delete-after http://www.scc.kit.edu/ Quick: wget -p --no-cache --ca-certificate=/etc/ssl/certs/Deutsche_Telekom_Root_CA_2.pem --no-check-certificate --ca-directory=/tmp/empty --delete-after https://www.scc.kit.edu/ Even worse, options like --no-check-certificat (bad, I know) or --ca-certificate=/etc/ssl/certs/Deutsche_Telekom_Root_CA_2.pem do not speed up the process, but "--ca-directory=/tmp/empty" does. It seems like gnutls is initialized for every request and upon initialisation parses all certificates contained in /etc/ssl/certs I file this as bug against wget, since --ca-certificate and --no-check-certificate do not seem to have any effect, so I guess initialisation of gnutls is defective. -- System Information: Debian Release: 7.2 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 3.2.0-4-686-pae (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages wget depends on: ii dpkg 1.16.12 ii libc6 2.13-38 ii libgcrypt11 1.5.0-5+deb7u1 ii libgnutls26 2.12.20-7 ii libgpg-error0 1.10-3.1 ii libidn11 1.25-2 ii zlib1g 1:1.2.7.dfsg-13 wget recommends no packages. wget suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
