From owner-freebsd-hackers@FreeBSD.ORG Sun Jun 22 21:12:50 2008 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0E60A1065680 for ; Sun, 22 Jun 2008 21:12:50 +0000 (UTC) (envelope-from ken@mthelicon.com) Received: from hercules.mthelicon.com (hercules.mthelicon.com [66.90.103.179]) by mx1.freebsd.org (Postfix) with ESMTP id D72098FC19 for ; Sun, 22 Jun 2008 21:12:49 +0000 (UTC) (envelope-from ken@mthelicon.com) Received: from [192.168.0.192] (host81-159-204-168.range81-159.btcentralplus.com [81.159.204.168]) (authenticated bits=0) by hercules.mthelicon.com (8.14.2/8.14.2) with ESMTP id m5MLClJU060780 (version=TLSv1/SSLv3 cipher=DHE-DSS-AES128-SHA bits=128 verify=NO) for ; Sun, 22 Jun 2008 21:12:49 GMT (envelope-from ken@mthelicon.com) From: Pegasus Mc cleaft Organization: Feathers To: freebsd-hackers@freebsd.org Date: Sun, 22 Jun 2008 22:12:45 +0100 User-Agent: KMail/1.9.7 References: <20080606234135.46144207@baby-jane-lamaiziere-net.local> <20080622202041.07f85145@baby-jane-lamaiziere-net.local> In-Reply-To: <20080622202041.07f85145@baby-jane-lamaiziere-net.local> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-15" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Message-Id: <200806222212.45861.ken@mthelicon.com> Subject: Re: AMD Geode LX crypto accelerator (glxsb) X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Jun 2008 21:12:50 -0000 On Sunday 22 June 2008 19:20:41 Patrick Lamaizi=E8re wrote: > On FreeBSD 7, OpenSSL does not use the cryptodev engine by default. This > is a known problem. See > http://unix.derkeiler.com/Mailing-Lists/FreeBSD/hackers/2008-06/msg00076.= ht >ml > > openssl speed -evp aes-128-cbc -elapsed -engine cryptodev Try patching openssl to force the use of the crypto hardware by default (li= ke=20 ssh, etc)=20 ~Peg =2D-- eng_cryptodev.c.orig 2008-02-05 18:10:31.000000000 +0000 +++ eng_cryptodev.c 2008-06-14 18:25:36.175353823 +0100 @@ -1127,6 +1127,7 @@ } =20 ENGINE_add(engine); + ENGINE_set_default_ciphers(engine); ENGINE_free(engine); ERR_clear_error(); }