Hi,
We've just bought a few of Sun's Crypto Accelerator 1000 PCI cards.
I'd like to use them with apache/openssl/mod_ssl, but really don't
want to use the old apache and openssl that sun "supports" in its
binaries (apache-1.3.12 and openssl-0.9.6b-engine).
I think I've gotten openssl to compile with the same apparent
flags as sun used to compile the binary openssl that came with
the cards. What am I missing? The speed runs below show
that newly compiled openssl is not touching the card.
Has anyone else found success with these cards and ssl?
_Gary
Here is my configure command -- designed to emulate the
apparent configuration that sun used to compile its binary:
./Configure \
no-mdc2 no-md2 no-md4 no-ripemd no-idea no-rc5 no-cast no-desx \
no-hw-atalla no-hw-ncipher no-hw-cswift \
-I/opt/SUNWconn/crypto/include \
-R/opt/SUNWconn/crypto/lib \
solaris-sparcv8-cc
# the speed run:
# ./openssl-0.9.7-beta2/apps/openssl speed -engine dynamic rsa1024
engine "dynamic" set.
Doing 1024 bit private rsa's for 10s: 164 1024 bit private RSA's in 10.00s
Doing 1024 bit public rsa's for 10s: 2847 1024 bit public RSA's in 9.69s
OpenSSL 0.9.7-beta2 16 Jun 2002
built on: Wed Jul 10 17:16:26 PDT 2002
options:bn(64,32) rc4(ptr,char) des(ptr,risc1,16,long) aes(partial) blowfish(ptr)
compiler: cc -KPIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN
-DHAVE_DLFCN_H -DOPENSSL_NO_KRB5 -DOPENSSL_NO_MDC2 -DOPENSSL_NO_MD2
-DOPENSSL_NO_MD4 -DOPENSSL_NO_RIPEMD -DOPENSSL_NO_IDEA
-DOPENSSL_NO_RC5 -DOPENSSL_NO_CAST -DOPENSSL_NO_DESX
-DOPENSSL_NO_HW_ATALLA -DOPENSSL_NO_HW_NCIPHER -DOPENSSL_NO_HW_CSWIFT
-I/opt/SUNWconn/crypto/include -R/opt/SUNWconn/crypto/lib -xarch=v8 -xO5
-xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W
available timing options: TIMES TIMEB HZ=100 [sysconf value]
timing function used: times
sign verify sign/s verify/s
rsa 1024 bits 0.0610s 0.0034s 16.4 293.8
# finally, the same speed run usings Sun's binary:
# /opt/SUNWconn/crypto/bin/openssl speed rsa1024
Doing 1024 bit private rsa's for 10s: 4878 1024 bit private RSA's in 0.34s
Doing 1024 bit public rsa's for 10s: 33788 1024 bit public RSA's in 2.13s
OpenSSL 0.9.6b [engine] 9 Jul 2001
built on: Wed Jan 23 15:11:25 PST 2002
options:bn(64,32) rc4(ptr,char) des(ptr,risc1,16,long) blowfish(ptr)
compiler: /ws/cpg-tools/SUNWspro/SC6.1/bin/cc -KPIC
-DTHREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DNO_MDC2
-DNO_MD2 -DNO_MD4 -DNO_RIPEMD -DNO_IDEA -DNO_RC5 -DNO_CAST
-DNO_DESX -DNO_HW_ATALLA -DNO_HW_NCIPHER -DNO_HW_CSWIFT
-I/ws/kcl1.0-gate/proto/root_sparc/opt/SUNWconn/crypto/include
-R/opt/SUNWconn/crypto/lib -xarch=v8 -xO5 -xstrconst -xdepend -Xa
-DB_ENDIAN -DBN_DIV2W
sign verify sign/s verify/s
rsa 1024 bits 0.0001s 0.0001s 14347.1 15862.9
#
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
