Ok, good that works. And you should seen some incrementing in all those zero's down at the bottom of /proc/drivers/z90crypt, correct?
And you don't see any on SSH leading you to believe its not working for ssh? Marcy Cortes Operating Systems Engineer, z/VM and Linux on System z Enterprise Hosting Services, Mainframe/Midrange Services Wells Fargo Bank | 201 Third Street | San Francisco, CA 94103 MAC A0187-050 Tel 415-477-6343 | Cell 415-517-0895 [email protected] This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. -----Original Message----- From: Linux on 390 Port [mailto:[email protected]] On Behalf Of Rogério Soares Sent: Monday, February 14, 2011 1:41 PM To: [email protected] Subject: Re: [LINUX-390] crypto with sshd Marcy, with #openssl_conf = openssl_def jbsp124:~ # openssl speed -evp des-ede3-cbc Doing des-ede3-cbc for 3s on 16 size blocks: 4132050 des-ede3-cbc's in 2.94s Doing des-ede3-cbc for 3s on 64 size blocks: 1090654 des-ede3-cbc's in 2.95s Doing des-ede3-cbc for 3s on 256 size blocks: 276504 des-ede3-cbc's in 2.97s Doing des-ede3-cbc for 3s on 1024 size blocks: 69077 des-ede3-cbc's in 2.96s Doing des-ede3-cbc for 3s on 8192 size blocks: 8580 des-ede3-cbc's in 2.94s OpenSSL 0.9.8a 11 Oct 2005 built on: Mon Jul 27 13:51:43 UTC 2009 options:bn(64,64) md2(int) rc4(ptr,int) des(idx,cisc,4,long) aes(partial) blowfish(idx) compiler: gcc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DB_ENDIAN -DNO_ASM -DMD32_REG_T=int -O2 -fmessage-length=0 -Wall -g -fomit-frame-pointer -fno-strict-aliasing -DTERMIO -Wall -fstack-protector -fbranch-probabilities -DB_ENDIAN -DNO_ASM available timing options: TIMES TIMEB HZ=100 [sysconf value] timing function used: times The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes des-ede3-cbc 22487.35k 23661.65k 23833.34k 23896.91k 23907.27k with openssl_conf = openssl_def jbsp124:~ # vi /etc/ssl/openssl.cnf jbsp124:~ # openssl speed -evp des-ede3-cbc Doing des-ede3-cbc for 3s on 16 size blocks: 12827073 des-ede3-cbc's in 2.97s Doing des-ede3-cbc for 3s on 64 size blocks: 8270315 des-ede3-cbc's in 2.97s Doing des-ede3-cbc for 3s on 256 size blocks: 3360218 des-ede3-cbc's in 2.97s Doing des-ede3-cbc for 3s on 1024 size blocks: 1006040 des-ede3-cbc's in 2.98s Doing des-ede3-cbc for 3s on 8192 size blocks: 132563 des-ede3-cbc's in 2.98s OpenSSL 0.9.8a 11 Oct 2005 built on: Mon Jul 27 13:51:43 UTC 2009 options:bn(64,64) md2(int) rc4(ptr,int) des(idx,cisc,4,long) aes(partial) blowfish(idx) compiler: gcc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DB_ENDIAN -DNO_ASM -DMD32_REG_T=int -O2 -fmessage-length=0 -Wall -g -fomit-frame-pointer -fno-strict-aliasing -DTERMIO -Wall -fstack-protector -fbranch-probabilities -DB_ENDIAN -DNO_ASM available timing options: TIMES TIMEB HZ=100 [sysconf value] timing function used: times The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes des-ede3-cbc 69102.08k 178215.54k 289634.95k 345699.65k 364414.80k jbsp124:~ # On Mon, Feb 14, 2011 at 7:19 PM, Marcy Cortes <[email protected] > wrote: > You have no card accessible to Linux. > > Do you have a OPTION CRYPTO APVIRT in your directory entry > What do you get when you type > > Q CRYPTO AP on VM. > > > > Marcy > > > -----Original Message----- > From: Linux on 390 Port [mailto:[email protected]] On Behalf Of > Rogério Soares > Sent: Monday, February 14, 2011 1:14 PM > To: [email protected] > Subject: Re: [LINUX-390] crypto with sshd > > and yes, i'm running under vm 6.1. > > > > On Mon, Feb 14, 2011 at 7:07 PM, Marcy Cortes < > [email protected] > > wrote: > > > I'm pretty sure SLES 10 SP3's openssh is already built correctly and you > > should not have to rebuild it. > > What do you get when you > > cat /proc/drivers/z90crypt (please post) > > Are you running under VM? > > > > > > Marcy > > > > -----Original Message----- > > From: Linux on 390 Port [mailto:[email protected]] On Behalf Of > > Rogério Soares > > Sent: Monday, February 14, 2011 12:53 PM > > To: [email protected] > > Subject: Re: [LINUX-390] crypto with sshd > > > > i get the rpm source version from SLES10SP3 to openssh-4.2p1-18.40.35 > > package and change de spec file to include --ssl-engine and made a > rpmbuild > > .. that is why asking.. on paper is not clear if the change is only this > or > > something more... thanks anyway. > > > > > > > > On Mon, Feb 14, 2011 at 6:43 PM, Mark Post <[email protected]> wrote: > > > > > >>> On 2/14/2011 at 03:08 PM, Rogério Soares<[email protected]> > > > wrote: > > > > Mark, i already did it too.. > > > > > > > > jbsp124:~ # openssl engine > > > > (dynamic) Dynamic engine loading support > > > > (ibmca) Ibmca hardware engine support > > > > jbsp124:~ # > > > > jbsp124:~ # > > > > jbsp124:~ # rpm -qa | grep openss > > > > openssl-devel-0.9.8a-18.36 > > > > openssl-0.9.8a-18.36 > > > > openssh-askpass-4.2p1-18.40.35 > > > > openssl-ibmca-1.0.0-7.16 > > > > compat-openssl097g-0.9.7g-13.16 > > > > openssh-4.2p1-18.40.35 > > > > > > > > on sshd server the only change is enable --ssl-engine ? > > > > > > You need to have a version of openSSH with the patch that actually > > enables > > > the use of SSL. In the IBM paper, they were working with an modified > > > version of openssh-5.1p1. I doubt very much that a copy of the 4.2p1 > > source > > > is going to have that. > > > > > > > > > Mark Post > > > > > > ---------------------------------------------------------------------- > > > For LINUX-390 subscribe / signoff / archive access instructions, > > > send email to [email protected] with the message: INFO LINUX-390 > or > > > visit > > > http://www.marist.edu/htbin/wlvindex?LINUX-390 > > > ---------------------------------------------------------------------- > > > For more information on Linux on System z, visit > > > http://wiki.linuxvm.org/ > > > > > > > ---------------------------------------------------------------------- > > For LINUX-390 subscribe / signoff / archive access instructions, > > send email to [email protected] with the message: INFO LINUX-390 or > > visit > > http://www.marist.edu/htbin/wlvindex?LINUX-390 > > ---------------------------------------------------------------------- > > For more information on Linux on System z, visit > > http://wiki.linuxvm.org/ > > > > ---------------------------------------------------------------------- > > For LINUX-390 subscribe / signoff / archive access instructions, > > send email to [email protected] with the message: INFO LINUX-390 or > > visit > > http://www.marist.edu/htbin/wlvindex?LINUX-390 > > ---------------------------------------------------------------------- > > For more information on Linux on System z, visit > > http://wiki.linuxvm.org/ > > > > ---------------------------------------------------------------------- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO LINUX-390 or > visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > ---------------------------------------------------------------------- > For more information on Linux on System z, visit > http://wiki.linuxvm.org/ > > ---------------------------------------------------------------------- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO LINUX-390 or > visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > ---------------------------------------------------------------------- > For more information on Linux on System z, visit > http://wiki.linuxvm.org/ > ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/ ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
