bearssl: handshake fix, provide proper get_select_socks() implementation

- bring bearssl handshake times down from +200ms down to other TLS backends
- vtls: improve generic get_select_socks() implementation
- tests: provide Apache with a suitable ssl session cache

Closes #11675
This commit is contained in:
Stefan Eissing 2023-08-17 11:16:11 +02:00 committed by Daniel Stenberg
parent 57e81ff3db
commit 1bccee76c8
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
3 changed files with 72 additions and 19 deletions

View file

@ -48,6 +48,7 @@ class Httpd:
'authz_user', 'authz_core', 'authz_host',
'auth_basic', 'auth_digest',
'env', 'filter', 'headers', 'mime',
'socache_shmcb',
'rewrite', 'http2', 'ssl', 'proxy', 'proxy_http', 'proxy_connect',
'mpm_event',
]
@ -251,6 +252,7 @@ class Httpd:
f'Listen {self.env.proxy_port}',
f'Listen {self.env.proxys_port}',
f'TypesConfig "{self._conf_dir}/mime.types',
f'SSLSessionCache "shmcb:ssl_gcache_data(32000)"',
]
if 'base' in self._extra_configs:
conf.extend(self._extra_configs['base'])