Commits on Jan 11, 2022

1. libssl: Load only the ciphers and digests needed for TLS, not all of … …

   …them
   
   OPENSSL_init_crypto(), added in 1.1.0, loads all available ciphers
   and digests by default. Since we only need the TLS-related ones,
   that only increases the startup time and the memory usage.
   
   Before:
   ```
   OPENSSL_INIT: ossl_init_base: Setting up stop handlers
   OPENSSL_INIT: ossl_init_register_atexit()
   OPENSSL_INIT: ossl_init_load_crypto_nodelete()
   OPENSSL_INIT: openssl_config_int((null), (null), 50)
   OPENSSL_INIT: ossl_init_engine_rdrand: engine_load_rdrand_int()
   OPENSSL_INIT: ossl_init_thread_start: marking thread for err_state
   OPENSSL_INIT: ossl_init_load_crypto_strings: err_load_crypto_strings_int()
   OPENSSL_INIT: ossl_init_engine_dynamic: engine_load_dynamic_int()
   OPENSSL_INIT: ossl_init_add_all_ciphers: openssl_add_all_ciphers_int()
   OPENSSL_INIT: ossl_init_add_all_digests: openssl_add_all_digests()
   OPENSSL_INIT: ossl_init_ssl_base: Adding SSL ciphers and digests
   OPENSSL_INIT: ossl_init_ssl_base: SSL_COMP_get_compression_methods()
   OPENSSL_INIT: ossl_init_ssl_base: SSL_add_ssl_module()
   OPENSSL_INIT: ossl_init_load_ssl_strings: ERR_load_SSL_strings()
   OPENSSL_INIT: ossl_init_thread_start: marking thread for rand
   OPENSSL_INIT: ossl_init_thread_start: marking thread for rand
   ```
   
   After:
   ```
   OPENSSL_INIT: ossl_init_base: Setting up stop handlers
   OPENSSL_INIT: ossl_init_register_atexit()
   OPENSSL_INIT: ossl_init_load_crypto_nodelete()
   OPENSSL_INIT: openssl_config_int((null), (null), 50)
   OPENSSL_INIT: ossl_init_engine_rdrand: engine_load_rdrand_int()
   OPENSSL_INIT: ossl_init_thread_start: marking thread for err_state
   OPENSSL_INIT: ossl_init_load_crypto_strings: err_load_crypto_strings_int()
   OPENSSL_INIT: ossl_init_engine_dynamic: engine_load_dynamic_int()
   OPENSSL_INIT: ossl_init_ssl_base: Adding SSL ciphers and digests
   OPENSSL_INIT: ossl_init_ssl_base: SSL_COMP_get_compression_methods()
   OPENSSL_INIT: ossl_init_ssl_base: SSL_add_ssl_module()
   OPENSSL_INIT: ossl_init_load_ssl_strings: ERR_load_SSL_strings()
   OPENSSL_INIT: ossl_init_thread_start: marking thread for rand
   OPENSSL_INIT: ossl_init_thread_start: marking thread for rand
   ```

   

   rgacogne committed Jan 11, 2022
   Configuration menu

   • View commit details
   • Copy full SHA for 719a2ee
   • Browse repository at this point

   Copy the full SHA

   719a2ee View commit details

   Browse the repository at this point in the history