We want to add a switch to openssl's zlib compression methord

2011-06-08 Thread Guan Jun He
Hi, Openssl Developpers:

  We have a platform with cryptographic hardware,and we try to take advantage 
of the platform's hardware cryptographic features.But openSSL compresses data 
before the encryption, having a massive performance impact(throughput decrease, 
CPU load increase) on platforms with cryptographic hardware.
 
 There are probably two methords to work-around it:
* environment variable, the attached patch is written for this methord.
  it's produced against oepnssl version 0.9.8, it other versions also need the 
  patch,we are glad to submit it.
* add an item to configure file openssl.cnf.

What do you think about this?
Thank you very much for your reply.

best,
Guanjun
__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org


Re: We want to add a switch to openssl's zlib compression methord

2011-06-08 Thread Thor Lancelot Simon
On Tue, Jun 07, 2011 at 10:58:20PM -0600, Guan Jun He wrote:
 Hi, Openssl Developpers:
 
   We have a platform with cryptographic hardware,and we try to take advantage 
 of the platform's hardware cryptographic features.But openSSL compresses data 
 before the encryption, having a massive performance impact(throughput 
 decrease, 
 CPU load increase) on platforms with cryptographic hardware.
  
  There are probably two methords to work-around it:
 * environment variable, the attached patch is written for this methord.
   it's produced against oepnssl version 0.9.8, it other versions also need 
 the 
   patch,we are glad to submit it.
 * add an item to configure file openssl.cnf.
 
 What do you think about this?

Again, I think this should be configured via an option on the SSL_CTX.

Thor
__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org