Speed up OpenSAML initialization ?

[Christopher Bongaarts]

On 2/27/2015 3:52 PM, Tom Zeller wrote:
> On Fri, Feb 27, 2015 at 3:41 PM, Brent Putman <putmanb at georgetown.edu> wrote:
>> So, I don't know what's causing your slowness.  That's really
>> excessively long.
> Looks like a Mac Mini thing on Java 7 :
>
> https://bugs.openjdk.java.net/browse/JDK-8022063

 From the ticket:

> Per above data, the following resources impact the performance 
> significantly:
> 1. the size of cacerts impact the load performance of default trust 
> manager
> 2. the size of security providers impact the load performance of 
> default providers
> 3. the size of enabled cipher suites impact the load performance of 
> JSSE component 

So it's possible that the default CA cert store has more items (or are 
switching to SHA2 signatures...).  Those can get switched up in point 
releases of the JRE, so the specific Java version might make a difference.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%