From owner-freebsd-stable Sun Aug 20 4:21:11 2000 Delivered-To: freebsd-stable@freebsd.org Received: from maynard.mail.mindspring.net (maynard.mail.mindspring.net [207.69.200.243]) by hub.freebsd.org (Postfix) with ESMTP id 79D8837B424; Sun, 20 Aug 2000 04:21:06 -0700 (PDT) Received: from netcom1.netcom.com (user-2initcs.dialup.mindspring.com [165.121.117.156]) by maynard.mail.mindspring.net (8.9.3/8.8.5) with ESMTP id HAA25119; Sun, 20 Aug 2000 07:21:04 -0400 (EDT) Received: by netcom1.netcom.com (Postfix, from userid 1000) id 37099E6A02; Sun, 20 Aug 2000 04:21:02 -0700 (PDT) From: Mike Harding To: kris@FreeBSD.org Cc: stable@FreeBSD.org In-reply-to: (message from Kris Kennaway on Sun, 20 Aug 2000 04:08:08 -0700 (PDT)) Subject: Re: HEADS UP: OpenSSL 0.9.5a merge References: Message-Id: <20000820112102.37099E6A02@netcom1.netcom.com> Date: Sun, 20 Aug 2000 04:21:02 -0700 (PDT) Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Good morning! I am not the only one with insomnia. :) You sent me a patch set earlier but I could not get it to work. I think I can use the ports static libraries and put them in /usr/lib (ick) and then build Apache_modssl. Admittedly a hack but I need. I'll post my results. - Mike Harding X-Authentication-Warning: freefall.freebsd.org: kris owned process doing -bs Date: Sun, 20 Aug 2000 04:08:08 -0700 (PDT) From: Kris Kennaway Cc: stable@FreeBSD.org Content-Type: TEXT/PLAIN; charset=US-ASCII X-RULES: lists On Sun, 20 Aug 2000, Mike Harding wrote: > > Kris - is there going to be a way in make.conf or similar to pick up > the assembly routines for RSA and the bulk crypto? It's twice as fast > as the C version that was being built for 0.9.4, at least for RSA. > Some of us commercial users have to double up the boxes or buy > accelerators or explain why we're not using Linux to support lots of > cold RSA connections. Yes, I have patches but need to figure out how they should be enabled: we need to do it properly, which means having a way to tell "make world" what types of CPU-specific optimizations (i.e. asm code) it should perform (e.g. if you have a Pentium II but there are no pentium II-specific optimizations, you still want pentium optimizations). > Failing that, can the ports be used to build Apache_modssl for > 4-stable users? If performance is critical you can remove the FORBIDDEN check in the openssl port (I assume thats what you meant) and use that, but it's not really supported and you may have to do some other hackery to bsd.port.mk to make it not look at the system version. Kris -- In God we Trust -- all others must submit an X.509 certificate. -- Charles Forsythe To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message