OpenSSL: Use SSL_MODE_RELEASE_BUFFERS if available, reduces memory use

See also :
http://www.openssl.org/docs/ssl/SSL_CTX_set_mode.html
http://www.imperialviolet.org/2010/06/25/overclocking-ssl.html

Signed-off-by: Cristian Rodríguez <crrodriguez@opensuse.org>

diff --git a/TODO-RELEASE b/TODO-RELEASE
index b6ff7db5e9bc4a99f1a031b52e6f9e053de273d7..7255985b6fcea7061cfef55986bd08c414dd22d4 100644 (file)
--- a/TODO-RELEASE
+++ b/TODO-RELEASE
@@ -43,9 +43,6 @@ To be addressed in 7.21.8 (or 7.22.0?)
       http://curl.haxx.se/mail/lib-2011-07/0186.html and
       http://curl.haxx.se/mail/lib-2011-08/0008.html
 
-305 - "Use SSL_MODE_RELEASE_BUFFERS if available," by Cristian Rodríguez
-      http://curl.haxx.se/mail/lib-2011-08/0017.html
-
 306 - SSL Sessions shared by Alejandro Alvarez Ayllon
       http://curl.haxx.se/mail/lib-2011-08/0002.html
 

diff --git a/lib/ssluse.c b/lib/ssluse.c
index 91ed93b2cf598179f7e91cd86482ef5c301b889a..924a37df46ce6e9a5f51c4b0643840111f52a915 100644 (file)
--- a/lib/ssluse.c
+++ b/lib/ssluse.c
@@ -1489,6 +1489,10 @@ ossl_connect_step1(struct connectdata *conn,
     return CURLE_OUT_OF_MEMORY;
   }
 
+#ifdef SSL_MODE_RELEASE_BUFFERS
+  SSL_CTX_set_mode(connssl->ctx, SSL_MODE_RELEASE_BUFFERS);
+#endif
+
 #ifdef SSL_CTRL_SET_MSG_CALLBACK
   if(data->set.fdebug && data->set.verbose) {
     /* the SSL trace callback is only used for verbose logging so we only