Re: OpenSSL JSSE SSLEngine implementation

2015-05-21 Thread Christopher Schultz
Rémy, On 5/18/15 11:46 AM, Rémy Maucherat wrote: Early performance results show the NIO(2) connector with SSL being equivalent or maybe even slightly faster than the APR connector, with JSSE very far behind. With SSL being nearly mandatory in the new protocols, SSL performance becomes a very

Re: OpenSSL JSSE SSLEngine implementation

2015-05-21 Thread Rémy Maucherat
2015-05-21 19:48 GMT+02:00 Christopher Schultz ch...@christopherschultz.net : Rémy, On 5/18/15 11:46 AM, Rémy Maucherat wrote: Early performance results show the NIO(2) connector with SSL being equivalent or maybe even slightly faster than the APR connector, with JSSE very far behind.

Re: OpenSSL JSSE SSLEngine implementation

2015-05-19 Thread Rémy Maucherat
2015-05-18 21:42 GMT+02:00 Mark Thomas ma...@apache.org: Very, very nice. On the native side, I'm all for taking as much as we can. No reason not to aim for something that the Netty folks can just use without having to patch locally. Thanks. I'm continuing to work on it in trunk now (

OpenSSL JSSE SSLEngine implementation

2015-05-18 Thread Rémy Maucherat
Hi, As part of a university project, Numa de Montmollin, a student interning @redhat, has worked on adapting to Tomcat some code I discovered inside the Netty project, which implements a SSL engine using OpenSSL. Normally, this sort of thing is supposed to be done using JCE, as was attempted

Re: OpenSSL JSSE SSLEngine implementation

2015-05-18 Thread Mark Thomas
On 18/05/2015 16:46, Rémy Maucherat wrote: Hi, As part of a university project, Numa de Montmollin, a student interning @redhat, has worked on adapting to Tomcat some code I discovered inside the Netty project, which implements a SSL engine using OpenSSL. Normally, this sort of thing is