From 62c74d77497ed8b798b443af7e13d5801d40b9dc Mon Sep 17 00:00:00 2001 From: Dietmar Maurer Date: Wed, 14 Oct 2020 12:24:15 +0200 Subject: [PATCH] use SslAcceptor::mozilla_intermediate_v5 This allows TLSv1.3, and let the client select ciphers. After this change AES is prefered over chacha20, so TLS speed is now much faster. --- src/bin/proxmox-backup-proxy.rs | 2 +- src/bin/proxmox_backup_client/benchmark.rs | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/bin/proxmox-backup-proxy.rs b/src/bin/proxmox-backup-proxy.rs index b28ac035..7593dc43 100644 --- a/src/bin/proxmox-backup-proxy.rs +++ b/src/bin/proxmox-backup-proxy.rs @@ -69,7 +69,7 @@ async fn run() -> Result<(), Error> { let key_path = configdir!("/proxy.key"); let cert_path = configdir!("/proxy.pem"); - let mut acceptor = SslAcceptor::mozilla_intermediate(SslMethod::tls()).unwrap(); + let mut acceptor = SslAcceptor::mozilla_intermediate_v5(SslMethod::tls()).unwrap(); acceptor.set_private_key_file(key_path, SslFiletype::PEM) .map_err(|err| format_err!("unable to read proxy key {} - {}", key_path, err))?; acceptor.set_certificate_chain_file(cert_path) diff --git a/src/bin/proxmox_backup_client/benchmark.rs b/src/bin/proxmox_backup_client/benchmark.rs index 716aaf0d..37bb87fb 100644 --- a/src/bin/proxmox_backup_client/benchmark.rs +++ b/src/bin/proxmox_backup_client/benchmark.rs @@ -86,7 +86,7 @@ struct BenchmarkResult { static BENCHMARK_RESULT_2020_TOP: BenchmarkResult = BenchmarkResult { tls: Speed { speed: None, - top: 1_000_000.0 * 690.0, // TLS to localhost, AMD Ryzen 7 2700X + top: 1_000_000.0 * 1235.0, // TLS to localhost, AMD Ryzen 7 2700X }, sha256: Speed { speed: None,