Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Slow response from curl with nss for LDAPS request #5874

Closed
nosajsnikta opened this issue Aug 28, 2020 · 3 comments
Closed

Slow response from curl with nss for LDAPS request #5874

nosajsnikta opened this issue Aug 28, 2020 · 3 comments

Comments

@nosajsnikta
Copy link

Environment:

  1. RHEL 7.8
  2. Curl version 7.27 using NSS encryption

When attempting to make an LDAPS request to a Windows domain controller, I am finding curl to be incredibly slow (up to 10 minutes) to return a response (for what is a trivial amount of data).

To check if it was a problem with curl, I downloaded the latest source code 7.72, and rebuilt it with the following flags:

configure --with-nss --enable-ldaps --enable-ldap
make
make install

I then repeated the LDAPS request and it was still painfully slow (but did complete eventually)

I then rebuilt curl with the --with-ssl option, so curl would use openssl instead. I re-run the request and the response was instant.

In addition to this, the slow performance does not happen on either RHEL6 or RHEL8 (curl built with openssl instead here). It is only RHEL7 with curl built to use NSS that is not working as expected.

Has anyone else come across similar issues of curl performing badly with nss?

@bagder
Copy link
Member

bagder commented Aug 28, 2020

Virtually nobody is using NSS as backend for curl anymore since Red Hat ditched it. The reward for investigating and fixing this issue is extremely low. I would recommend switching to another TLS library as a work-around, or consider options to persuade someone into working on this bug.

@bagder
Copy link
Member

bagder commented Aug 28, 2020

And isn't RHEL7 shipping curl 7.29.0?

@nosajsnikta
Copy link
Author

nosajsnikta commented Aug 28, 2020 via email

@curl curl deleted a comment Oct 24, 2020
@bagder bagder closed this as completed in 5cb475d Nov 4, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants