diff options
| author | lloyd <[email protected]> | 2011-03-21 14:34:54 +0000 |
|---|---|---|
| committer | lloyd <[email protected]> | 2011-03-21 14:34:54 +0000 |
| commit | 17bdf198acb8d4421af55a1a89f87ec24da4125d (patch) | |
| tree | 32499472787b149844003d5d3aa34ab060cde721 | |
| parent | 4c5deb8796f011adead3be867d36c679d761aacf (diff) | |
Disable the by default strong key checking on loading a private
key. This slowed down loading private keys somewhat dramatically.
Most people don't care, but both groups using botan for DNSSEC has
performance problems due to it.
| -rw-r--r-- | doc/log.txt | 3 | ||||
| -rw-r--r-- | src/build-data/buildh.in | 2 |
2 files changed, 4 insertions, 1 deletions
diff --git a/doc/log.txt b/doc/log.txt index 51cb4c046..636fed104 100644 --- a/doc/log.txt +++ b/doc/log.txt @@ -1,6 +1,9 @@ * 1.9.16-dev, ????-??-?? - Second release candidate for 1.10.0 + - Disable the by-default 'strong' checking of private keys that are + loaded from storage. You can always request key material sanity + checking using check_key. * 1.9.15, 2011-03-21 - First release candidate for 1.10.0 diff --git a/src/build-data/buildh.in b/src/build-data/buildh.in index 2682d2ad9..8e0de0183 100644 --- a/src/build-data/buildh.in +++ b/src/build-data/buildh.in @@ -35,7 +35,7 @@ /* PK key consistency checking toggles */ #define BOTAN_PUBLIC_KEY_STRONG_CHECKS_ON_LOAD 1 -#define BOTAN_PRIVATE_KEY_STRONG_CHECKS_ON_LOAD 1 +#define BOTAN_PRIVATE_KEY_STRONG_CHECKS_ON_LOAD 0 #define BOTAN_PRIVATE_KEY_STRONG_CHECKS_ON_GENERATE 1 /* Should we use GCC-style inline assembler? */ |