Hi Benjamin, On Thu, Jan 10, 2013 at 09:18:27PM +0100, Benjamin Pineau wrote: > On 10/01/2013 01:11, Willy Tarreau wrote: > >What I don't know is if the older versions are still in use nor for how > >long. > > Hi, > > The current stable Debian version (Squeeze) is also stuck > to OpenSSL 0.9.8o (without AES-NI acceleration). > cf. http://packages.debian.org/squeeze/openssl > > On such systems, I tend to install the "intel-accel" engine > Vincent talked about, which brings AES-NI acceleration (among > others, ie. RC4 and RSA are faster too) : > http://openssl.org/contrib/ . I only have to compile it and > copy libintel-accel.so in the engines directory (then it will > be loaded by OpenSSL's "dynamic" engine support).
(...) Great, that's what I call a useful report, very much appreciated. So probably we'll at least merge the engine support without any tunables first and see later how to enable tuning. Thanks ! Willy
