United StatesChange Country, Oracle Worldwide Web Sites Communities I am a... I want to...
Bug ID: JDK-4989229 Reload cert stores in HTTPS and signing verification cause slow performance
JDK-4989229 : Reload cert stores in HTTPS and signing verification cause slow performance

Details
Type:
Bug
Submit Date:
2004-02-05
Status:
Resolved
Updated Date:
2004-03-30
Project Name:
JDK
Resolved Date:
2004-02-24
Component:
deploy
OS:
solaris_8,windows_xp
Sub-Component:
deployment_toolkit
CPU:
x86,sparc
Priority:
P2
Resolution:
Fixed
Affected Versions:
1.4.2_03,5.0
Fixed Versions:
1.4.2_05 (05)

Related Reports
Backport:
Duplicate:

Sub Tasks

Description
If HTTPS is used in the apps, plugin and webstart attempts to reload every certificate stores to ensure the certificates are up-to-date for every new connection. However, some of the certificates stores take a lot of time to load and they seldom change, e.g. cacerts. As a result, it causes overhead (usually over 1 second) for every HTTPS connection used in the app. It has significant impact to app startup time if the app is loaded through HTTPS.

If signing is used in the apps, plugin and webstart also attempts to reload every certificate stores to ensure the certificates are up-to-date for signing verification. However, it causes unnecessary overhead for every signed jar used in the app. It also has significant impact to app startup time if the app is composed of many signed jars.

This problem is reported by several customers against J2SE v1.4.2 and v1.5 with MS VM; customers reported their apps are obviously slower when making HTTPS connection in Sun VM compared to MS VM.

To optimize the performance, either root CA cert store should not be reloaded within the session, or the cert store should be reloaded only if it has been changed since the last access.

###@###.### 2004-02-05
###@###.### 2004-02-05

                                    

Comments
EVALUATION

Committed to fix in Tiger beta 2.
###@###.### 2004-02-05
                                     
2004-02-05
SUGGESTED FIX

 http://javaweb.sfbay/~ngthomas/webrevs/4989229/webrev/

###@###.### 2004-02-12
                                     
2004-02-12
CONVERTED DATA

BugTraq+ Release Management Values

COMMIT TO FIX:
1.4.2_05
generic
tiger-beta2

FIXED IN:
1.4.2_05
tiger-beta2

INTEGRATED IN:
1.4.2_05
tiger-b40
tiger-beta2


                                     
2004-06-14



Hardware and Software, Engineered to Work Together