You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by MRedford-Jones <ma...@capgemini.com> on 2018/04/03 11:07:57 UTC
Performance issues with Santuario 2.1.1 performTransforms
Hello
We're using Santuario 2.1.1 (java version) to canonicalise, digest and then
encode an XML document and form an XML signature as part of a
non-repudiation service.
We're finding that any document >4MB has severe performance issues when
calling performTransforms. By severe: it's taking hours to do a transform.
Does anybody have any thoughts or pointers as to what could be the issue or
tips for improving the performance?
--
Sent from: http://apache-xml-project.6118.n7.nabble.com/Apache-XML-Security-Dev-f33675.html
Re: Performance issues with Santuario 2.1.1 performTransforms
Posted by MRedford-Jones <ma...@capgemini.com>.
Thanks for taking a look Colm. I'd come to the same conclusion but thought
I'd reach out to the community. Back to square one!
Martin
Colm O hEigeartaigh-2 wrote
> I took a quick look at the test-case - I think the problem is that using
> an
> XPath Transform is just not efficient with a very large input document, as
> the XPath Filter gets called on each input node. I'm not sure if there's a
> more efficient way of implementing the code - the XPath Transform is not
> used very often from my experience.
>
> Colm.
>
> On Fri, Apr 6, 2018 at 10:30 AM, MRedford-Jones <
> martin.redford-jones@
>> wrote:
>
>> Colm
>>
>> There is a code example available on the HMRC Developer site: IR Mark
>> Calculator
>> <http://www.hmrc.gov.uk/softwaredevelopers/hmrcmark/markcalculator.zip>
>> Although this version is slightly old in that it uses v1.4.1 of the
>> xmlsec
>> library (we've seen the same performance issues on that library also).
>> I have attached two example XML submissions: Mark-Test-Files.zip
>> <http://apache-xml-project.6118.n7.nabble.com/file/t5735/
> > Mark-Test-Files.zip>
>> .
>>
>> The fragment extracted is transformed against the XML Digital Signature
>> core schema
>> <https://www.w3.org/TR/2002/REC-xmldsig-core-20020212/
> > xmldsig-core-schema.xsd>
>> . An example of the transform and filter is within the IRMarkCalculator
>> class
>>
>>
>> Colm O hEigeartaigh-2 wrote
>> > Do you have a test-case to help reproduce the problem? What transforms
>> are
>> > you using?
>> >
>> > Colm.
>>
>>
>>
>>
>>
>> --
>> Sent from: http://apache-xml-project.6118.n7.nabble.com/Apache-XML-
>> Security-Dev-f33675.html
>>
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
--
Sent from: http://apache-xml-project.6118.n7.nabble.com/Apache-XML-Security-Dev-f33675.html
Re: Performance issues with Santuario 2.1.1 performTransforms
Posted by Colm O hEigeartaigh <co...@apache.org>.
I took a quick look at the test-case - I think the problem is that using an
XPath Transform is just not efficient with a very large input document, as
the XPath Filter gets called on each input node. I'm not sure if there's a
more efficient way of implementing the code - the XPath Transform is not
used very often from my experience.
Colm.
On Fri, Apr 6, 2018 at 10:30 AM, MRedford-Jones <
martin.redford-jones@capgemini.com> wrote:
> Colm
>
> There is a code example available on the HMRC Developer site: IR Mark
> Calculator
> <http://www.hmrc.gov.uk/softwaredevelopers/hmrcmark/markcalculator.zip>
> Although this version is slightly old in that it uses v1.4.1 of the xmlsec
> library (we've seen the same performance issues on that library also).
> I have attached two example XML submissions: Mark-Test-Files.zip
> <http://apache-xml-project.6118.n7.nabble.com/file/t5735/
> Mark-Test-Files.zip>
> .
>
> The fragment extracted is transformed against the XML Digital Signature
> core schema
> <https://www.w3.org/TR/2002/REC-xmldsig-core-20020212/
> xmldsig-core-schema.xsd>
> . An example of the transform and filter is within the IRMarkCalculator
> class
>
>
> Colm O hEigeartaigh-2 wrote
> > Do you have a test-case to help reproduce the problem? What transforms
> are
> > you using?
> >
> > Colm.
>
>
>
>
>
> --
> Sent from: http://apache-xml-project.6118.n7.nabble.com/Apache-XML-
> Security-Dev-f33675.html
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: Performance issues with Santuario 2.1.1 performTransforms
Posted by MRedford-Jones <ma...@capgemini.com>.
Colm
There is a code example available on the HMRC Developer site: IR Mark
Calculator
<http://www.hmrc.gov.uk/softwaredevelopers/hmrcmark/markcalculator.zip>
Although this version is slightly old in that it uses v1.4.1 of the xmlsec
library (we've seen the same performance issues on that library also).
I have attached two example XML submissions: Mark-Test-Files.zip
<http://apache-xml-project.6118.n7.nabble.com/file/t5735/Mark-Test-Files.zip>
.
The fragment extracted is transformed against the XML Digital Signature
core schema
<https://www.w3.org/TR/2002/REC-xmldsig-core-20020212/xmldsig-core-schema.xsd>
. An example of the transform and filter is within the IRMarkCalculator
class
Colm O hEigeartaigh-2 wrote
> Do you have a test-case to help reproduce the problem? What transforms are
> you using?
>
> Colm.
--
Sent from: http://apache-xml-project.6118.n7.nabble.com/Apache-XML-Security-Dev-f33675.html
Re: Performance issues with Santuario 2.1.1 performTransforms
Posted by Colm O hEigeartaigh <co...@apache.org>.
Do you have a test-case to help reproduce the problem? What transforms are
you using?
Colm.
On Tue, Apr 3, 2018 at 12:07 PM, MRedford-Jones <
martin.redford-jones@capgemini.com> wrote:
> Hello
>
> We're using Santuario 2.1.1 (java version) to canonicalise, digest and then
> encode an XML document and form an XML signature as part of a
> non-repudiation service.
>
> We're finding that any document >4MB has severe performance issues when
> calling performTransforms. By severe: it's taking hours to do a transform.
>
> Does anybody have any thoughts or pointers as to what could be the issue or
> tips for improving the performance?
>
>
>
> --
> Sent from: http://apache-xml-project.6118.n7.nabble.com/Apache-XML-
> Security-Dev-f33675.html
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com