Re: Exp Branch for OpenSSL on Windows

[jah <jah () zadkiel plus com>]

On 15/05/2008 17:01, Kris Katterjohn wrote:
> Hey guys,
>
> Has anybody tested this at all?  Just let me know if you have/had any
> problems.
>
> As I said before, you shouldn't have to change anything in your build
> procedure; it should just work.
It built just fine with no changes
.
I had a play with version detection against some ssl websites and
noticed that if nmap couldn't get a version match from "Server Hello"
messages and had to go as far as handling "change cipher spec" and
"encrypted handshake" messages, the cpu cycles went through the roof.
I thought I'd see if building OpenSSL on this machine would make any
difference.  This was straightforward too, due to the great
upgrade-guide (I was thrown slightly by "Compilation failed" messages
when I ran do_ms.bat and thought it might be worth updating the guide to
mention that these can be safely ignored).
I rebuilt nmap with openssl, but it didn't have any appreciable effect
and I note that in the minute that it took to successfully complete
version detection, one of my dual cores was at full-pelt for around 45
seconds.  I'll look into this more deeply, but I wonder if anyone else
noticed similar?

regards,

jah



_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org