Re: OCSP? (UNCLASSIFIED)

2006-10-12 Thread pbains
. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of pbains Sent: Wednesday, October 11, 2006 4:32 PM To: modssl-users@modssl.org Subject: Re: OCSP? (UNCLASSIFIED) My organization is headed down this road after experiencing performance

Re: OCSP? (UNCLASSIFIED)

2006-10-11 Thread pbains
My organization is headed down this road after experiencing performance degradation from checking large CRLs. As we come up with a solution, will post what I find out. Alternatively, if you have any information, would appreciate it, thanks! Paul Victor, Dwight P CTR DISA PAC wrote:

RE: CRL Checking Uses Excessive Memory

2006-10-11 Thread pbains
I am working on a DoD project, and we are experiencing high CPU load on HP-UX servers with multiple CPUs in this scenario. We are thinking it is because the CRL size for some CAs is huge - ad-hoc tests done with certs associated with small CRLs do not produce CPU spikes, but large CRLs do. We are