Menu

TimeStamp SetProperty DISABLEKEYUSAGECOUNTER TRUE doesn't work?

2013-07-23
2013-07-25
  • claudio salpetre

    Hi,

    I need to disable the counter of the key usage to improve the TimeStamp performance.

    I've tried:
    signserver setproperty 1 DISABLEKEYUSAGECOUNTER TRUE
    And also:
    signserver setproperty 1 DISABLEKEYUSAGECOUNTER=TRUE

    I've received the message:
    "Setting the property DISABLEKEYUSAGECOUNTER to TRUE for worker 1"

    then I reload the worker and check if all is working.

    But in the KEYUSAGECOUNTER table the counter still increasing.

    Is there anything more to do to disable this property?

     
  • claudio salpetre

    Maybe I found the issue.

    From the official documentation (http://www.signserver.org/manual/misc.html):
    "Since SignServer 3.2.3 it is sometimes possible to operate SignServer without a database management system and instead rely on SignServer to manage persistence using local files.
    Notice that all features of SignServer is not supported without having a database and that the performance and scalability characteristics might be different. Currently archiving to database and the group key service are not supported.
    To increase throughput it is recommended to disable the key usage counter as every request would otherwise have to lock and update that file. See the property DISABLEKEYUSAGECOUNTER in the section Limiting the number of signatures."

    I'm using the signserver-3.2.0.
    Now I try with a greater version, but I don't want to change my JBoss (jboss-4.2.3.GA), hope this works.

     
  • Markus Kilås

    Markus Kilås - 2013-07-25

    Hi Claudio,

    The feature to disable the key usage counter was introduced in version 3.2.3 (DSS-540) and setting it in older versions has no effect.

    To set it for worker 1 use:
    bin/signserver setproperty 1 DISABLEKEYUSAGECOUNTER TRUE
    bin/signserver reload 1

    If you run the command "ant doc" you will get the documentation relevant to your particular SignServer version. The version on the web site http://signserver.org is if the latest released version.

    Support for JBoss 4 was droppen in SignServer 3.3 so in older versions it should still work.

    Best regards,
    Markus
    PrimeKey

    PrimeKey Solutions offers a commercial EJBCA & SignServer support subscription and training. Please see www.primekey.se or contact info@primekey.se for more information.
    [url]http://www.primekey.se/Services/Support/[/url]
    [url]http://www.primekey.se/Services/Training/[/url]

     

Log in to post a comment.