Speed up OpenSAML initialization ?

[Brent Putman]

On 2/27/15 1:46 PM, Tom Zeller wrote:
> Is it possible to disable the runtime algorithm checks performed by
> the AlgorithmRegistry ?

Not currently, no.  And if it were possible then the registry would by
necessity have to either default all algos to runtime unsupported or
supported.  The former would mean you basically would not be able to do
anything involving cryptography (which is pretty much anything
involving an actual SAML request/response...).  Unless I guess it
special-cased the most basic things that we assume are always supported
in any modern JRE.

The latter would mean things would either work or not, depending on
what the configuration/metadata looked like - if you effectively tried
to use an algorithm that wasn't supported, things would blow up.


>
> For me, it takes ~7s to init OpenSAML, and I'd like to reduce that
> during development when I'm bouncing the IdP.

That seems like a long time.  I've never noticed that it takes that
long for me, but I'll pay attention the next time I'm running tests or
starting my test IdP.



>
> Any other suggestions are welcome.

I don't have any at the moment, but I'll think on it some more.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20150227/446de568/attachment.html