wpa_supplicant slow to verify server certificate

[Jouni Malinen]

On Tue, Apr 14, 2009 at 10:56:55PM -0500, wpa at fastmail.fm wrote:
> I check the time of each EAP messages coming into the supplicant, and
> the time of the EAP messages going out of the supplicant. For all other
> messages, the time difference between EAP REQ and EAP RSP is about 0.1
> to 0.2 second, but for the certificate verification, the last EAP RSP
> message is about 1.5 seconds from the time EAP REQ comes in. The openssl
> was used with the supplicant. Maybe the openssl is causing the delay in
> verifying the certificate, but I don't know how to improve the time to
> verify the server certificate.

Yes, this is most likely result of the CPU-intensive calculations needed
with certificates. How fast a CPU are you using? How long private keys
are used in the certificates?

-- 
Jouni Malinen                                            PGP id EFC895FA