Luke Howard 934d5e09bf hcrypto PKCS#11 backend: Call C_Initialize() on every hcrypto call ...

This is required as the PKCS#11 library needs to be reinitialized after
forking. This was causing a problem with ipropd.

This fix appears to incur a repeatable 10ms performance penalty on aes-test.

Caching the initialization status using a once control and invalidating it
on fork provided no measurable performance benefit on Solaris 11. Other
approaches would not be thread-safe or would involve more intrusive code
changes, such as exposing heimbase's atomics.

2018-05-12 13:45:30 +10:00

26 KiB

Raw Blame History

View Raw