gecko-dev/security/certverifier
David Keeler 8b85837b61 bug 1372656 - load loadable roots on a background thread r=Cykesiopka,jcj
In a profile, loading the loadable roots PKCS#11 module (i.e. the built-in root
CA module) accounted for about 60% of the time to initialize PSM/NSS. Since we
only need the roots module loaded when we're actually looking for an issuing
certificate or querying a certificate's trust, we can do the load
asynchronously (where it hopefully finishes before we actually need it, because
otherwise we'll have to wait anyway).

MozReview-Commit-ID: JyY6NtpQAUj

--HG--
extra : rebase_source : f63a697b18a409dd042289afa2b727b09f81f19f
2017-06-08 16:10:00 -07:00
..
tests/gtest
BRNameMatchingPolicy.cpp
BRNameMatchingPolicy.h
CTDiversityPolicy.cpp
CTDiversityPolicy.h
CTKnownLogs.h
CTLog.h
CTLogVerifier.cpp
CTLogVerifier.h
CTObjectsExtractor.cpp
CTObjectsExtractor.h
CTPolicyEnforcer.cpp
CTPolicyEnforcer.h
CTSerialization.cpp
CTSerialization.h
CTVerifyResult.cpp
CTVerifyResult.h
CertVerifier.cpp bug 1372656 - load loadable roots on a background thread r=Cykesiopka,jcj 2017-06-08 16:10:00 -07:00
CertVerifier.h
ExtendedValidation.cpp bug 1372656 - load loadable roots on a background thread r=Cykesiopka,jcj 2017-06-08 16:10:00 -07:00
ExtendedValidation.h bug 1372656 - load loadable roots on a background thread r=Cykesiopka,jcj 2017-06-08 16:10:00 -07:00
MultiLogCTVerifier.cpp
MultiLogCTVerifier.h
NSSCertDBTrustDomain.cpp bug 1372656 - load loadable roots on a background thread r=Cykesiopka,jcj 2017-06-08 16:10:00 -07:00
NSSCertDBTrustDomain.h
OCSPCache.cpp
OCSPCache.h
OCSPRequestor.cpp
OCSPRequestor.h
OCSPVerificationTrustDomain.cpp
OCSPVerificationTrustDomain.h
SignedCertificateTimestamp.cpp
SignedCertificateTimestamp.h
SignedTreeHead.h
StartComAndWoSignData.inc
moz.build bug 1372656 - load loadable roots on a background thread r=Cykesiopka,jcj 2017-06-08 16:10:00 -07:00