Re: crypto with sshd

2011-02-16 Thread Arthur Winterling
-...@dimebar.com To: LINUX-390@vm.marist.edu Date: 15.02.2011 21:34 Subject: Re: crypto with sshd Sent by: Linux on 390 Port LINUX-390@vm.marist.edu On 15/02/2011 20:26, Sterling James wrote: I starting to get a little confused, since I thought this provided openssh the use of OpenSSL dynamic engine

Re: crypto with sshd

2011-02-15 Thread Leland Lucius
On 2/12/11 3:03 PM, Rogério Soares wrote: Mike, i have installed all packages describe on paper.. appears like sshd is not calling icalib, i just have recompile sshd with --ssl-engine, is just it ? i do not understand very well on paper if the PTF is just is or something more... When I got

Re: crypto with sshd

2011-02-15 Thread Rogério Soares
Leland, i rebuild the package with your flags, now a see a a difference at least.. the cpu usage by ssh was very low...: PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND 16814 root 16 0 6004 2704 2064 R 82 0.1 0:38.65 /usr/bin/ssh -x -oForwardAgent no

Re: crypto with sshd

2011-02-15 Thread Leland Lucius
On 2/15/11 10:19 AM, Rogério Soares wrote: but, i shoud be able to see some increase on Per-device successfully completed request counts ? Thanks for you attention :) Yes, they do increase for me each time I login via ssh: pzsadm01:~ # cat /proc/driver/z90crypt zcrypt version: 2.1.1

Re: crypto with sshd

2011-02-15 Thread Sterling James
I starting to get a little confused, since I thought this provided openssh the use of OpenSSL dynamic engine loading support, so that the ibmca engine can now use Central Processor Assist for Cryptographic Function (CPACF). If that were true, use of CPACF would not be reflected in

Re: crypto with sshd

2011-02-15 Thread Philip Rowlands
On 15/02/2011 20:26, Sterling James wrote: I starting to get a little confused, since I thought this provided openssh the use of OpenSSL dynamic engine loading support, so that the ibmca engine can now use Central Processor Assist for Cryptographic Function (CPACF). If that were true, use of

Re: crypto with sshd

2011-02-14 Thread Rogério Soares
Mark, i already did it too.. jbsp124:~ # openssl engine (dynamic) Dynamic engine loading support (ibmca) Ibmca hardware engine support jbsp124:~ # jbsp124:~ # jbsp124:~ # rpm -qa | grep openss openssl-devel-0.9.8a-18.36 openssl-0.9.8a-18.36 openssh-askpass-4.2p1-18.40.35 openssl-ibmca-1.0.0-7.16

Re: crypto with sshd

2011-02-14 Thread Mark Post
On 2/14/2011 at 03:08 PM, Rogério Soaresrogerio.soa...@gmail.com wrote: Mark, i already did it too.. jbsp124:~ # openssl engine (dynamic) Dynamic engine loading support (ibmca) Ibmca hardware engine support jbsp124:~ # jbsp124:~ # jbsp124:~ # rpm -qa | grep openss

Re: crypto with sshd

2011-02-14 Thread Rogério Soares
i get the rpm source version from SLES10SP3 to openssh-4.2p1-18.40.35 package and change de spec file to include --ssl-engine and made a rpmbuild .. that is why asking.. on paper is not clear if the change is only this or something more... thanks anyway. On Mon, Feb 14, 2011 at 6:43 PM, Mark

Re: crypto with sshd

2011-02-14 Thread Marcy Cortes
] On Behalf Of Rogério Soares Sent: Monday, February 14, 2011 12:53 PM To: LINUX-390@vm.marist.edu Subject: Re: [LINUX-390] crypto with sshd i get the rpm source version from SLES10SP3 to openssh-4.2p1-18.40.35 package and change de spec file to include --ssl-engine and made a rpmbuild .. that is why

Re: crypto with sshd

2011-02-14 Thread Rogério Soares
) Are you running under VM? Marcy -Original Message- From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of Rogério Soares Sent: Monday, February 14, 2011 12:53 PM To: LINUX-390@vm.marist.edu Subject: Re: [LINUX-390] crypto with sshd i get the rpm source version from

Re: crypto with sshd

2011-02-14 Thread Rogério Soares
) Are you running under VM? Marcy -Original Message- From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of Rogério Soares Sent: Monday, February 14, 2011 12:53 PM To: LINUX-390@vm.marist.edu Subject: Re: [LINUX-390] crypto with sshd i get the rpm source version

Re: crypto with sshd

2011-02-14 Thread Marcy Cortes
: RE: [LINUX-390] crypto with sshd You have no card accessible to Linux. Do you have a OPTION CRYPTO APVIRT in your directory entry What do you get when you type Q CRYPTO AP on VM. Marcy -Original Message- From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf

Re: crypto with sshd

2011-02-14 Thread Marcy Cortes
, February 14, 2011 1:14 PM To: LINUX-390@vm.marist.edu Subject: Re: [LINUX-390] crypto with sshd and yes, i'm running under vm 6.1. On Mon, Feb 14, 2011 at 7:07 PM, Marcy Cortes marcy.d.cor...@wellsfargo.com wrote: I'm pretty sure SLES 10 SP3's openssh is already built correctly and you should

Re: crypto with sshd

2011-02-14 Thread Rogério Soares
on VM. Marcy -Original Message- From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of Rogério Soares Sent: Monday, February 14, 2011 1:14 PM To: LINUX-390@vm.marist.edu Subject: Re: [LINUX-390] crypto with sshd and yes, i'm running under vm 6.1. On Mon, Feb 14

Re: crypto with sshd

2011-02-14 Thread Marcy Cortes
. -Original Message- From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of Rogério Soares Sent: Monday, February 14, 2011 1:41 PM To: LINUX-390@vm.marist.edu Subject: Re: [LINUX-390] crypto with sshd Marcy, with #openssl_conf = openssl_def jbsp124:~ # openssl speed -evp

Re: crypto with sshd

2011-02-14 Thread Rogério Soares
@vm.marist.edu] On Behalf Of Rogério Soares Sent: Monday, February 14, 2011 1:41 PM To: LINUX-390@vm.marist.edu Subject: Re: [LINUX-390] crypto with sshd Marcy, with #openssl_conf = openssl_def jbsp124:~ # openssl speed -evp des-ede3-cbc Doing des-ede3-cbc for 3s on 16 size blocks: 4132050 des

Re: crypto with sshd

2011-02-14 Thread Rogério Soares
Subject: Re: [LINUX-390] crypto with sshd and yes, i'm running under vm 6.1. On Mon, Feb 14, 2011 at 7:07 PM, Marcy Cortes marcy.d.cor...@wellsfargo.com wrote: I'm pretty sure SLES 10 SP3's openssh is already built correctly and you should not have to rebuild it. What do you

Re: crypto with sshd

2011-02-14 Thread Marcy Cortes
Do you have on the openCrypto* packages? Marcy -Original Message- From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of Rogério Soares Sent: Monday, February 14, 2011 2:23 PM To: LINUX-390@vm.marist.edu Subject: Re: [LINUX-390] crypto with sshd another thing is SSHD

Re: crypto with sshd

2011-02-14 Thread Rogério Soares
: Monday, February 14, 2011 2:23 PM To: LINUX-390@vm.marist.edu Subject: Re: [LINUX-390] crypto with sshd another thing is SSHD cpu usage.. with or without, on large transfer cpu usage is practicaly the same ... 2011/2/14 Rogério Soares rogerio.soa...@gmail.com maybe i made some confusion here

Re: crypto with sshd

2011-02-13 Thread Pedro Principeza
@vm.marist.edu Date: 12/02/2011 19:03 Subject:Re: crypto with sshd Sent by:Linux on 390 Port LINUX-390@vm.marist.edu Mike, i have installed all packages describe on paper.. appears like sshd is not calling icalib, i just have recompile sshd with --ssl-engine, is just it ? i do

Re: crypto with sshd

2011-02-13 Thread Mark Post
On 2/12/2011 at 04:03 PM, Rogério Soaresrogerio.soa...@gmail.com wrote: i have installed all packages describe on paper.. appears like sshd is not calling icalib, i just have recompile sshd with --ssl-engine, is just it ? i do not understand very well on paper if the PTF is just is or

Re: crypto with sshd

2011-02-12 Thread Rogério Soares
...@homerow.net wrote: Another way of telling is to transfer a LARGE file with your pre-crypto sshd and again with your post-crypto sshd. Just watch the difference it makes in your favorite z/VM performance monitor. You won't necessarily realize an improvement in throughput, but the amount

crypto with sshd

2011-02-11 Thread Rogério Soares
Hello dears, I have set up a test machine to use crpto card... my wish is using that with sshd... so, i installed : • openssh • openssl • openssl-ibmca • libica • z90crypt made changes on openssl.cnf to use libica engine, load z90crypt module and after that i get openssh from source rpm and

Re: crypto with sshd

2011-02-11 Thread Michael O'Reilly
ist.edu Subject crypto with sshd 02/11/2011 05:56

Re: crypto with sshd

2011-02-11 Thread Rogério Soares
To Sent by: Linux on LINUX-390@vm.marist.edu 390 Port cc linux-...@vm.mar ist.edu Subject crypto with sshd

Re: crypto with sshd

2011-02-11 Thread Leland Lucius
Another way of telling is to transfer a LARGE file with your pre-crypto sshd and again with your post-crypto sshd. Just watch the difference it makes in your favorite z/VM performance monitor. You won't necessarily realize an improvement in throughput, but the amount of CPU consumed drops