From owner-freebsd-current@FreeBSD.ORG Wed Aug 4 17:00:45 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 994A516A4CE; Wed, 4 Aug 2004 17:00:45 +0000 (GMT) Received: from carver.gumbysoft.com (carver.gumbysoft.com [66.220.23.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id 622B143D5F; Wed, 4 Aug 2004 17:00:45 +0000 (GMT) (envelope-from dwhite@gumbysoft.com) Received: by carver.gumbysoft.com (Postfix, from userid 1000) id 52FC972DF2; Wed, 4 Aug 2004 10:00:45 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by carver.gumbysoft.com (Postfix) with ESMTP id 4E45F72DB5; Wed, 4 Aug 2004 10:00:45 -0700 (PDT) Date: Wed, 4 Aug 2004 10:00:45 -0700 (PDT) From: Doug White To: Sam Leffler In-Reply-To: <200408031320.17076.sam@errno.com> Message-ID: <20040804095553.I25616@carver.gumbysoft.com> References: <20040803214133.31dd9b03.nork@FreeBSD.org> <20040803111428.S15648@carver.gumbysoft.com> <200408031320.17076.sam@errno.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-current@freebsd.org cc: Norikatsu Shigemura cc: Mike Tancsa Subject: Re: OpenSSL with hifn(4) (cryptodev) X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Aug 2004 17:00:45 -0000 On Tue, 3 Aug 2004, Sam Leffler wrote: > > Also, your app has to ask for the acceleration if they want it, by > > requesting the 'cryptodev' engine. And that requires OpenSSL 0.9.7, which > > you probably have since the 'openssl engine' command exists. > > > > nork, which app(s) are you trying to accelerate? > > I don't believe this is correct. Unless something has changed libcrypto (from > openssl) will check for /dev/crypto, query what algorithms are supported, and > then use h/w acceleration if it exists. That'd be a recent change then. The last time I mesed with this, which was a year and a half ago, you didn't get h/w accel unless you specified the engine. I had to use patches that were flagged EXPERIMENTAL to get engine support in whatever it was I was toying with, and had to use that support to get it using hardware crypto. I'll see if I can find what it was I was messing with and try again :) -- Doug White | FreeBSD: The Power to Serve dwhite@gumbysoft.com | www.FreeBSD.org