On Sun, Mar 10, 2013 at 02:19:53PM +0100, Gilles Chanteperdrix wrote: > > There seems to exist a patch to enable padlock on via nano, it may be > found here: > https://bugzilla.redhat.com/attachment.cgi?id=433962 > > I have tried it and it seems to improve openssl performance on via nano, > BUT... > > For some reason, this patch does not seem to be in the (more recent) > version of openssl used on sid, so I am not sure it is safe to apply it.
If you apply the attached patch to /etc/ssl/openssl.cnf it should work for you. I added this patch to Debian at some point, but it broke on non-via CPUs so I had to disable it again. Kurt
--- openssl/apps/openssl.cnf.orig 2012-06-06 00:45:56.000000000 +0200 +++ openssl/apps/openssl.cnf 2012-06-06 00:46:46.000000000 +0200 @@ -19,6 +19,8 @@ # (Alternatively, use a configuration file that has only # X.509v3 extensions in its main [= default] section.) +openssl_conf = openssl_def + [ new_oids ] # We can add new OIDs in here for use by 'ca', 'req' and 'ts'. @@ -348,3 +350,16 @@ # (optional, default: no) ess_cert_id_chain = no # Must the ESS cert id chain be included? # (optional, default: no) + +[openssl_def] +engines = engine_section + +[engine_section] +padlock = padlock_section + +[padlock_section] +soft_load=1 +init=1 +default_algorithms = ALL +dynamic_path=padlock +
