There is more code committed. Check-out or wait for *tomorrow*
openssl-SNAP-20120919 snapshot. There is SmartMIPS AES code (pass
-msmartmips to Configure) and Configure accepts double dash as compiler
options. Please double-check and optionally post performance for new AES
code.

On a different note, thanks for the double dash fix for Configure.  That
said, I have one more issue in relation to the way Configure handles
flags completely unrelated to MIPS...

On MacOSX, you have to target a specific SDK if you want to ensure
it targets the proper release of MacOSX.  That means you pass flags
like this on to the compiler:

-isysroot /Developer/SDKs/MacOSX10.6.sdk/ -mmacosx-version-min=10.6 
-Wl,-syslibroot,/Developer/SDKs/MacOSX10.6.sdk/

The issue is that first one, where there is a space between the
arguments.

Now, I know what you're thinking, just quote it ... and sure, that
does work if you call "Configure" directly such as:

./Configure darwin64-x86_64-cc "-isysroot /Developer/SDKs/MacOSX10.6.sdk/" 
-mmacosx-version-min=10.6 -Wl,-syslibroot,/Developer/SDKs/MacOSX10.6.sdk/

But the problem really comes in when you're using the ./config
wrapper script ... such as this:

export KERNEL_BITS=64
export CONFIG_OPTIONS="\"-isysroot /Developer/SDKs/MacOSX10.6.sdk/\" 
-mmacosx-version-min=10.6 -Wl,-syslibroot,/Developer/SDKs/MacOSX10.6.sdk/"
./config

You end up with output like this:
$ ./config
Operating system: i686-apple-darwinDarwin Kernel Version 11.2.0: Tue Aug 9 
20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64
Configuring for darwin64-x86_64-cc
target already defined - darwin64-x86_64-cc (offending arg: "-isysroot)

If you don't do the escaped quoting, it complains about 
/Developer/SDKs/MacOSX10.6.sdk in the same way.

Again, you're probably asking why not just use Configure directly?

The answer to that question would be FIPS140-2, where the UserGuide
requires:
./config
make
make install
With no exceptions...

Now, you may say, well MacOSX isn't on the FIPS supported/tested/validated list.
Ok, I'll give you that one ... I'm just thinking towards the future here. :)

Thanks!
-Brad
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to