Arne and Geoff,

        Sorry for the loooong delay in this reply, but thanks for your help.  This 
turned out to be barking up the wrong tree in the beginning, an error in the 
way our homebrewed server app was reporting SSL errors, and not load based at 
all...

        The real problem was that the engine implementation I was working on was not 
correctly handling the DES-CBC chaining that it needed to, as well as not 
accounting for decrypts in place.

        This new engine is available at:

http://www-124.ibm.com/developerworks/projects/libica

 under openssl-patches.  It now accelerates DES/TDES, SHA, RSA and RNG.

Kent

On Thursday 04 September 2003 02:12 pm, Geoff Thorpe wrote:
> Hi there,
>
> On September 4, 2003 02:10 pm, Arne Ansper wrote:
> > Of course the correct fix is to remove this code (the if sentences
> > above) completely, because it is not needed.
> >
> > The rationale why it is not needed is written down in this thread:
> >
> > http://www.mail-archive.com/[EMAIL PROTECTED]/msg00053.html
>
> Flicking over that thread, it appears you and Ben were sorting this out
> but clearly one part of it slipped through the cracks. Do you want to
> open a RT ticket and put the details in there? (Eg. you could also assign
> it to Ben seeing as he's the one who's already been fishing around in
> this).
>
> BTW: A normal problem on the openssl lists is that people post "-users"
> stuff to the "-dev" list, but this appears to be one of those rare
> instances where perhaps it's the other way round ...
>
> Cheers,
> Geoff

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to