Skip to content

Commit b752630

Browse files
Shigeki Ohtsurvagg
Shigeki Ohtsu
authored andcommitted
deps: add -no_rand_screen to openssl s_client
In openssl s_client on Windows, RAND_screen() is invoked to initialize random state but it takes several seconds in each connection. This added -no_rand_screen to openssl s_client on Windows to skip RAND_screen() and gets a better performance in the unit test of test-tls-server-verify. Do not enable this except to use in the unit test. Fixes: #1461 PR-URL: #1836 Reviewed-By: Ben Noordhuis <[email protected]>
1 parent b312b79 commit b752630

File tree

2 files changed

+20
-2
lines changed

2 files changed

+20
-2
lines changed

deps/openssl/openssl/apps/app_rand.c

+10-1
Original file line numberDiff line numberDiff line change
@@ -124,7 +124,16 @@ int app_RAND_load_file(const char *file, BIO *bio_e, int dont_warn)
124124
char buffer[200];
125125

126126
#ifdef OPENSSL_SYS_WINDOWS
127-
RAND_screen();
127+
/*
128+
* allocate 2 to dont_warn not to use RAND_screen() via
129+
* -no_rand_screen option in s_client
130+
*/
131+
if (dont_warn != 2) {
132+
BIO_printf(bio_e, "Loading 'screen' into random state -");
133+
BIO_flush(bio_e);
134+
RAND_screen();
135+
BIO_printf(bio_e, " done\n");
136+
}
128137
#endif
129138

130139
if (file == NULL)

deps/openssl/openssl/apps/s_client.c

+10-1
Original file line numberDiff line numberDiff line change
@@ -236,6 +236,7 @@ static BIO *bio_c_msg = NULL;
236236
static int c_quiet = 0;
237237
static int c_ign_eof = 0;
238238
static int c_brief = 0;
239+
static int c_no_rand_screen = 0;
239240

240241
#ifndef OPENSSL_NO_PSK
241242
/* Default PSK identity and key */
@@ -456,6 +457,10 @@ static void sc_usage(void)
456457
" -keymatexport label - Export keying material using label\n");
457458
BIO_printf(bio_err,
458459
" -keymatexportlen len - Export len bytes of keying material (default 20)\n");
460+
#ifdef OPENSSL_SYS_WINDOWS
461+
BIO_printf(bio_err,
462+
" -no_rand_screen - Do not use RAND_screen() to initialize random state\n");
463+
#endif
459464
}
460465

461466
#ifndef OPENSSL_NO_TLSEXT
@@ -1135,6 +1140,10 @@ int MAIN(int argc, char **argv)
11351140
keymatexportlen = atoi(*(++argv));
11361141
if (keymatexportlen == 0)
11371142
goto bad;
1143+
#ifdef OPENSSL_SYS_WINDOWS
1144+
} else if (strcmp(*argv, "-no_rand_screen") == 0) {
1145+
c_no_rand_screen = 1;
1146+
#endif
11381147
} else {
11391148
BIO_printf(bio_err, "unknown option %s\n", *argv);
11401149
badop = 1;
@@ -1240,7 +1249,7 @@ int MAIN(int argc, char **argv)
12401249
if (!load_excert(&exc, bio_err))
12411250
goto end;
12421251

1243-
if (!app_RAND_load_file(NULL, bio_err, 1) && inrand == NULL
1252+
if (!app_RAND_load_file(NULL, bio_err, ++c_no_rand_screen) && inrand == NULL
12441253
&& !RAND_status()) {
12451254
BIO_printf(bio_err,
12461255
"warning, not much extra random data, consider using the -rand option\n");

0 commit comments

Comments
 (0)