[Bug 230823] New: PadLock engine doesn't work in OpenSSL
https://bugzilla.novell.com/show_bug.cgi?id=230823 Summary: PadLock engine doesn't work in OpenSSL Product: openSUSE 10.2 Version: Final Platform: x86 OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: mludvig@logix.net.nz QAContact: qa@suse.de OpenSSL package doesn't correctly compile module for the PadLock crypto engine which renders the hardware acceleration on VIA Epia boards unusable. This is a known problem from upstream openssl-0.9.8 branch. Symptoms are similar to this: mludvig@zofka:~> openssl engine padlock 16803:error:25066067:DSO support routines:DLFCN_LOAD:could not load the shared library:dso_dlfcn.c:162:filename(/usr/lib/engines/libpadlock.so): /usr/lib/engines/libpadlock.so: cannot open shared object file: No such file or directory 16803:error:25070067:DSO support routines:DSO_load:could not load the shared library:dso_lib.c:244: 16803:error:260B6084:engine routines:DYNAMIC_LOAD:dso not found:eng_dyn.c:450: 16803:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:415:id=padlock One solution is to make the PadLock engine built-in to libcrypto.so again. That's the approach taken by Fedora guys which proved to work fine. Attaching a patch. See http://lists.logix.cz/pipermail/padlock/2006/000029.html -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230823 ------- Comment #1 from mludvig@logix.net.nz 2006-12-26 19:52 MST ------- Created an attachment (id=111058) --> (https://bugzilla.novell.com/attachment.cgi?id=111058&action=view) Patch to correctly initialize PadLock built-in engine -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230823 chrubis@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team- |mkoenig@novell.com |screening@forge.provo.novell| |.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230823 mkoenig@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230823 mkoenig@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |wizzy@gmx.de ------- Comment #2 from mkoenig@novell.com 2007-01-09 05:16 MST ------- *** Bug 230851 has been marked as a duplicate of this bug. *** -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230823 mkoenig@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED ------- Comment #3 from mkoenig@novell.com 2007-01-10 03:39 MST ------- submitted to stable -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230823 mludvig@logix.net.nz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED | ------- Comment #4 from mludvig@logix.net.nz 2007-01-10 04:00 MST ------- How about an update for 10.2? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230823 wizzy@gmx.de changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P2 - High -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230823 ------- Comment #9 from ast@novell.com 2007-01-10 08:47 MST ------- Michal, does for example ssh work? What is the impact? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230823 mludvig@logix.net.nz changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ast@novell.com ------- Comment #10 from mludvig@logix.net.nz 2007-01-10 15:53 MST ------- Yes, SSH is supposed to work. See the patch openssh-4.4p1-engines.diff in your openssh package. Of the other popular programs for instance OpenVPN is ready to take advantage of working engine. The impact is a huge speedup for AES encryption on systems with recent VIA CPUs (especially those popular mini-ITX VIA EPIA boards, but some laptops have it as well). See http://www.logix.cz/michal/devel/padlock/bench.xp for some benchmarks (not specifically SSH benchmarks but the impact will be similar). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230823 mkoenig@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |FIXED ------- Comment #11 from mkoenig@novell.com 2007-02-02 07:33 MST ------- submitted to 10.2 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230823 ------- Comment #12 from ast@novell.com 2007-02-07 09:45 MST ------- released -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
participants (1)
-
bugzilla_noreply@novell.com