sozu-proxy / sozu

Sōzu HTTP reverse proxy, configurable at runtime, fast and safe, built in Rust. It is awesome!
https://www.sozu.io/
GNU Affero General Public License v3.0
3.12k stars 194 forks source link

store certificates in parsed form in CertificateResolver #1027

Closed Keksoj closed 1 year ago

Keksoj commented 1 year ago

The GenericCertificateResolver would store certs in a ParsedCertificateAndKey form, after parsing and checking, but this form had to be re-parsed into rustls::sign::CertifiedKey at every handshake, diminishing performance. This commit comes back to the feature of 0.13.6: storing CertifiedKey directly in the certificate resolver.