On 2/15/11 10:19 AM, Rogério Soares wrote:
>
> but, i shoud be able to see some increase on Per-device successfully
> completed request counts ?
>
> Thanks for you attention :)
>
Yes, they do increase for me each time I login via ssh:
pzsadm01:~ # cat /proc/driver/z90crypt
zcrypt version: 2.1.1
Cryptographic domain: 9
Total device count: 1
PCICA count: 0
PCICC count: 0
PCIXCC MCL2 count: 0
PCIXCC MCL3 count: 0
CEX2C count: 0
CEX2A count: 1
requestq count: 0
pendingq count: 0
Total open handles: 2
Online devices: 1=PCICA 2=PCICC 3=PCIXCC(MCL2) 4=PCIXCC(MCL3) 5=CEX2C 6=CEX2A
0000000000000000 0000000000000000 6000000000000000 0000000000000000
Waiting work element counts
0000000000000000 0000000000000000 0000000000000000 0000000000000000
Per-device successfully completed request counts
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000009 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
Here's what I have installed:
libica-1.3.8-0.7
libica-32bit-1.3.8-0.7
openCryptoki-2.2.4-0.12.10
openCryptoki-32bit-2.2.4-0.12.10
openCryptoki-64bit-2.2.4-0.12.10
openssh-4.2p1-18.40.35 <-- has been modified with the extra define
openssl-0.9.8a-18.42.2
openssl-32bit-0.9.8a-18.42.2
openssl-ibmca-1.0.0-7.16
openssl-ibmca-32bit-1.0.0-7.16
Here's what I get when querying crypto support from with a guest:
pzsadm01:~ # vmcp q crypto ap
AP 00 CEX2C Queue 12 is superseded by CEX2A
AP 01 CEX2A Queue 12 is installed
AP 02 CEX2C Queue 12 is superseded by CEX2A
AP 03 CEX2A Queue 12 is installed
Here's what my openssl.cnf file looks like. One thing that I recall running
into was the correct placement of the openssl_cnf line. Make sure it comes
before the [new_oids] section.
#
# OpenSSL example configuration file.
# This is mostly being used for generation of certificate requests.
#
# This definition stops the following lines choking if HOME isn't
# defined.
HOME = .
RANDFILE = $ENV::HOME/.rnd
# Extra OBJECT IDENTIFIER info:
#oid_file = $ENV::HOME/.oid
oid_section = new_oids
openssl_conf = openssl_def
# To use this configuration file with the "-extfile" option of the
# "openssl x509" utility, name here the section containing the
# X.509v3 extensions to use:
# extensions =
# (Alternatively, use a configuration file that has only
# X.509v3 extensions in its main [= default] section.)
<<<snip>>>
[openssl_def]
engines = engine_section
[engine_section]
foo = ibmca_section
[ibmca_section]
dynamic_path = /usr/lib64/engines/libibmca.so
engine_id = ibmca
default_algorithms = ALL
#default_algorithms = RAND,RSA
init = 1
----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
----------------------------------------------------------------------
For more information on Linux on System z, visit
http://wiki.linuxvm.org/
