SSL improve speed

[JelleG]

Hi,

I installed a SSL Comodo certificate on my DA 1.501 VPS, using the default DA SSL method for a website.

When I run a speed test for my website, using tools.pingdom.com I have a quite long SSL and Connect time.
Also for pages that only load images of a few KB.

It uses 225ms to performing a SSL handshake and the same 225ms for connecting to the server.

Is there a way to improve the speed of the SSL connection?

 

[Harry Tang]

you can try enable http2.

 

[JelleG]

you can try enable http2.

Thanks! Therefore the following tutorial should be good? http://forum.directadmin.com/showthread.php?t=52590

 

[Harry Tang]

Yes, that's exactly what you are looking for

 

[JelleG]

Yes, that's exactly what you are looking for

Thanks a lot! I just enabled http2, but that sadly did not descrease the time a lot. It decreases for max 10 ms. Is there another solution?

 

[zEitEr]

Yes, SSL hadshake/verification takes time. You might need to review a list of used SSL/TLS certs and enable OCSP stapling https://en.wikipedia.org/wiki/OCSP_stapling in order to reduce time.

 

[JelleG]

Yes, SSL hadshake/verification takes time. You might need to review a list of used SSL/TLS certs and enable OCSP stapling https://en.wikipedia.org/wiki/OCSP_stapling in order to reduce time.

Thanks a lot! How can I enable SSL OCSP for my DA Apache server? Can you tell me what files I need to edit and how?

Edit: Is HTTP/2 required for OCSP Stapling?