Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • When we no longer need a read buffer or a write buffer for a given SSL, then release the memory we were using to hold it. Released memory is either appended to a list of unused RAM chunks on the SSL_CTX, or simply freed if the list of unused chunks would become longer than SSL_CTX->freelist_max_len, which defaults to 32. Using this flag can save around 34K per idle SSL connection. This flag has no effect on SSL v2 connections, or on DTLS connections.
  • ref: http://www.openssl.org/docs/ssl/SSL_CTX_set_mode.html Code Block #ifdef SSL_MODE_RELEASE_BUFFERS SSL_CTX_set_mode(ctx, SSL_MODE_RELEASE_BUFFERS); #endif
  • Status: https://issues.apache.org/jira/browse/TS-2413Image Added

4. Expose API to extract peer certificate data

...