From owner-freebsd-stable@freebsd.org Thu Dec 6 22:47:32 2018 Return-Path: Delivered-To: freebsd-stable@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DC9581316D60 for ; Thu, 6 Dec 2018 22:47:31 +0000 (UTC) (envelope-from herbert@gojira.at) Received: from mail.bsd4all.net (mail.bsd4all.net [IPv6:2a01:4f8:191:217b::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (Client CN "mail.bsd4all.net", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id F341A85C6B for ; Thu, 6 Dec 2018 22:47:30 +0000 (UTC) (envelope-from herbert@gojira.at) Date: Thu, 06 Dec 2018 23:47:19 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=gojira.at; s=mail201809; t=1544136448; bh=vfq7B+coTBo0g+/l8v1NfpXm0hVUrd+Oe7BbUmAQZ6M=; h=Date:Message-ID:From:To:Subject:MIME-Version:Content-Type; b=TmTct1Cf0eLJeqHkSlgoe/T+AWFPGLmjlOkpUHpVJb8ZkFh8sH8Dw36tEGtI1YWgQ fhTq9M63bk/Lbk5YwgW+oMGHa/YOfY8XmFr89Co7+cE8TmVByZsMRulezdcEF6SWhM rYeLtHTv+afWfEqvZuLVe7iWJ2oTdiU+rs2QwtCw+4Tmg25idmTTt4zDTrngJAsG03 g0nT7B43Flxb102gi36mYVeLkAtU/JYYRJlbByiZsg+XrOwnoV4tiDatCaGXgBzCL6 I+wIGLtlWtmzZhLAUywK56G2602/3SJToQ8OA+dgz+kFmhf9XdIfF0rvN/GJgX8BWt GBJuEKA7RVakg== Message-ID: <87h8fqjmrs.wl-herbert@gojira.at> From: "Herbert J. Skuhra" To: freebsd-stable@freebsd.org Subject: Re: /dev/crypto not being used in 12-STABLE In-Reply-To: References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) SEMI-EPG/1.14.7 (Harue) FLIM/1.14.9 (=?ISO-8859-4?Q?Goj=F2?=) APEL/10.8 EasyPG/1.0.0 Emacs/27.0 (x86_64-pc-linux-gnu) MULE/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII X-Rspamd-Queue-Id: F341A85C6B X-Spamd-Result: default: False [-3.69 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-0.998,0]; R_DKIM_ALLOW(-0.20)[gojira.at]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2a01:4f8:191:217b::25]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[gojira.at]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; DKIM_TRACE(0.00)[gojira.at:+]; MX_GOOD(-0.01)[mail.bsd4all.net]; MID_CONTAINS_FROM(1.00)[]; NEURAL_HAM_SHORT(-0.97)[-0.972,0]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; IP_SCORE(-1.21)[ipnet: 2a01:4f8::/29(-3.53), asn: 24940(-2.50), country: DE(-0.01)]; ASN(0.00)[asn:24940, ipnet:2a01:4f8::/29, country:DE]; RCVD_TLS_ALL(0.00)[] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Dec 2018 22:47:32 -0000 On Thu, 06 Dec 2018 20:19:44 +0100, John Nielsen wrote: > > I have upgraded two physical machines from 11-STABLE to 12-STABLE > recently (one is 12.0-PRERELEASE r341380 and the other is > 12.0-PRERELEASE r341391). I noticed today that neither machine seems > to be utilizing /dev/crypto. Typically I see at least ssh/sshd have > the device open plus some programs from ports. But 'fuser' doesn't > list any processes on either machine: > > # fuser /dev/crypto > /dev/crypto: > > Both machines are running custom kernels that include "device > crypto" and "device cryptodev". One of them additionally has "device > aesni". > > Is anyone else seeing this? Any idea what would cause it? With security/openssl (1.0.2q): % /usr/local/bin/openssl engine (cryptodev) BSD cryptodev engine (rdrand) Intel RDRAND engine (dynamic) Dynamic engine loading support % /usr/local/bin/openssl speed -engine cryptodev engine "cryptodev" set. With openssl 1.1.1a from base (and security/openssl111): % openssl engine (rdrand) Intel RDRAND engine (dynamic) Dynamic engine loading support % openssl speed -engine cryptodev invalid engine "cryptodev" 34371112960:error:25066067:DSO support routines:dlfcn_load:could not load the shared library:/usr/src/crypto/openssl/crypto/dso/dso_dlfcn.c:117:filename(/usr/lib/engines/cryptodev.so): Cannot open "/usr/lib/engines/cryptodev.so" 34371112960:error:25070067:DSO support routines:DSO_load:could not load the shared library:/usr/src/crypto/openssl/crypto/dso/dso_lib.c:162: 34371112960:error:260B6084:engine routines:dynamic_load:dso not found:/usr/src/crypto/openssl/crypto/engine/eng_dyn.c:414: 34371112960:error:2606A074:engine routines:ENGINE_by_id:no such engine:/usr/src/crypto/openssl/crypto/engine/eng_list.c:334:id=cryptodev 34371112960:error:25066067:DSO support routines:dlfcn_load:could not load the shared library:/usr/src/crypto/openssl/crypto/dso/dso_dlfcn.c:117:filename(libcryptodev.so): Shared object "libcryptodev.so" not found, required by "openssl" 34371112960:error:25070067:DSO support routines:DSO_load:could not load the shared library:/usr/src/crypto/openssl/crypto/dso/dso_lib.c:162: 34371112960:error:260B6084:engine routines:dynamic_load:dso not found:/usr/src/crypto/openssl/crypto/engine/eng_dyn.c:414: -- Herbert