Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

24.3 url function takes longer than expected to respond when configured with an incompatible cipher #62887

Open
strtgbb opened this issue Apr 23, 2024 · 0 comments

Comments

@strtgbb
Copy link

strtgbb commented Apr 23, 2024

Describe the situation
24.3 takes longer than expected to respond when configured with an incompatible cipher.
This affects URL function and dictionaries with a URL source.

How to reproduce
Affected version: 24.3

  • Non-default settings

<cipherList>some-incompatble-cipher</cipherList>

Localhost is running a simple HTTPS web-server that is configured with a restricted list of ciphers and responds with an integer.

For example, the webserver could be configured with

ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-GCM-SHA384

And ClickHouse with

PSK-AES128-CBC-SHA
  • Queries to run that lead to slow performance

One example:

echo -e "SELECT * FROM url('https://127.0.0.1:5001/data', 'CSV') FORMAT CSV" | clickhouse client -n 2>&1

This responds with an error message in about 30 seconds.

The effect can also be observed when selecting from a dictionary with a URL source.

Expected performance
I expect similar response times to previous versions.
24.2 and 23.8 work as expected and respond with an error in under 60ms

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant