Skip to content

Optimize selecting the signing key

Ondřej Surý requested to merge 4621-fix-cache-pruning-after-rndc-flush into main

Don't parse the crypto data before parsing and matching the id and the algorithm for consecutive DNSKEYs. This allows us to parse the RData only in case the other parameters match allowing us to skip keys that are of no interest to us, but still would consume precious CPU time by parsing possibly garbage with OpenSSL.

Closes #4621 (closed)

Merge request reports