Re: [Ejbca-develop] debug log ejbca.sh

[Michael S. <mi...@st...>]

Tomas Gustavsson wrote:
> It would be good if you include a little more of the original conversation.
> What was the command you were running again that is slow?

ejbca.sh ca editca --help (see old message attached below).

> But, using bcrypt with many rounds does affect performance ;-) 

But I did not expect the impact to be so big and to vary for differnt
commands. I suspect the password is checked many times for some commands. Right?

I'm currently using ejbca.passwordlogrounds=8 for acceptable performance which
is not that much for *the* sensitive admin password.

Ciao, Michael.

-------- Forwarded Message --------
Subject: [Ejbca-develop] ejbca.sh slow
Date: Wed, 26 Nov 2014 15:35:24 +0100
From: Michael Ströder <mi...@st...>
Reply-To: ejb...@li...
To: ejb...@li...

HI!

I'm having a hard time finding out why sometimes (not always) ejbca.sh is so
damn slow:

root@vm-ejbca-ocsp-01:~# time /opt/ejbca/bin/ejbca.sh ca --help
[..]
real	0m2.251s
user	0m2.748s
sys	0m0.288s
root@vm-ejbca-ocsp-01:~# time /opt/ejbca/bin/ejbca.sh ca editca --help
[..]
real	0m25.008s
user	0m18.069s
sys	0m0.192s

I'm looking with strace and tcpdump what's going on. But still nothing obvious.

Which debug logs should I enable in the JVM?

BTW: Any reason why using --help requires a running JBOSS?

Ciao, Michael.