Hi All,
I have 5 domains with big TLS certficates like each domain has more than 8K
bytes of certificates. I have observed that the kamailio taking quite
amount of time to initialize.
I looked at the code and found that the SSL_CONTEXT is initialized for each
process. Why can't we use the same SSL_CONTEXT for all process. This will
speed up the init time.
I changed using single SSL context for all process and initialization was
very fast.
According to my understanding on a new TLS connection SSL structure for a
connection shall copy all the data from SSL_CTXT. So there is no sharing of
resource here, as SSL_CTXT is readable for all process. So why we have to
create SSL_CTXT for each process.
Please let me know if any particular reason to do it.
Thanks
Jijo