[Opendnssec-develop] Re: [Opendnssec-commits] [keihatsu.kirei.se/svn/dnssec] r2525 - trunk/OpenDNSSEC

[Matthijs Mekking]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Perhaps some more useful statistics:

With verification:

ods-signerd: signer stderr: signer: number of signatures created: 20005
(196 rr/sec)

Without verification:

ods-signerd: signer stderr: signer: number of signatures created: 20005
(235 rr/sec)


Matthijs Mekking wrote:
> Jakob Schlyter wrote:
>> On 27 nov 2009, at 08.59, Matthijs Mekking wrote:
> 
>>> +* Signer Engine: verifies signature after creation.
>> what is the performance penalty on this?
>> is verification done using PKCS#11 or locally?
> 
>> 	jakob
> 
> 
> For a 416K tld alike zone, the initial signing time increased from 1m25
> to 1m42 on my Ubuntu desktop machine.
> 
> Verification is done locally with ldns_verify_rrsig_keylist.
> 
> Matthijs
> 
> 
_______________________________________________
Opendnssec-develop mailing list
Opendnssec-develop at lists.opendnssec.org
https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBAgAGBQJLD5MSAAoJEA8yVCPsQCW5nigH/j2prat09R2tzzoAc8rR7sYk
awvvYX//3uLmORloDs7v6kkOmrkslBqqM/wsM0Odndrk2bRSwr+7WD3WSEzy97im
vM2LmSlYtI2Fo4BSRaN3odmW3HqXvg3DxtDUzGGvk7o3uaTvYSIxtYvIX4RAQ1ks
JJbj+E7iXwFjIc6lkTsCUvtceiTVlOmosCyXzzO/rLpzmK8wy1bS48Tf8IqDXdRz
KBQEjCgwEtVe4Y8U3rVJR7x6vGl69doQYbRQfnp9AxddHQUTN6QXwSZHbp/8OVkA
UrMB9Sg6oRBpyoAMBfHtdDjIK8XAr+zrXR8XlohDy2jFsW3VzF9ZeuF8D5LPOLk=
=OM0G
-----END PGP SIGNATURE-----