https://bugzilla.novell.com/show_bug.cgi?id=784994 https://bugzilla.novell.com/show_bug.cgi?id=784994#c0 Summary: VIA padlock support on 64 systems accidentally removed. Classification: openSUSE Product: openSUSE 12.2 Version: Final Platform: 64bit OS/Version: openSUSE 12.2 Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: franz.wudy@mail.com QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:15.0) Gecko/20100101 Firefox/15.0.1 Running OpenSUSE 12.2 final - 64 bit. Trying to use padlock engine support under openssl with a VIA NANO X2 processor. Does not work: $ openssl engine padlock 140353542751912:error:260B606D:engine routines:DYNAMIC_LOAD:init failed:eng_dyn.c:521: 140353542751912:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:417:id=padlock $ openssl version OpenSSL 1.0.1c 10 May 2012 That is a really sad thing as the hardware support of AES encryption is an important thing considering that the processor itself is pretty weak... Sure enough looking at the sources reveals: openssl-1.0-1c/engines/e_padlock.c {...} #undef COMPILE_HW_PADLOCK #if !defined(I386_ONLY) && !defined(OPENSSL_NO_INLINE_ASM) # if (defined(__GNUC__) && (defined(__i386__) || defined(__i386))) || \ (defined(_MSC_VER) && defined(_M_IX86)) # define COMPILE_HW_PADLOCK # endif #endif {...} The engine is not being compiled during the build process (64 bit). There are lots of fixes and patches around. I found one on the SUSE build machine: https://build.opensuse.org/package/files?package=openssl&project=Base%3ASystem&rev=68 openssl-padlock-x86_64-head.patch This patch would allow for the engine to build (I did not test it though - just limited knowledge of how to do that). With revision 69 this patch disappeared without any comment. Is it possible to re-enable this functionality, please? I'd be glad to help and test patches or rpms. One dangerous thing happens if you believe that padlock works on a 64 bit machine as it used to work out of the box on 32 bit machines: Enabling the permanent use of padlock renders your system pretty useless. Openssl is not working any more (without any fallback) and leaves you with all kinds of problems, no Apache, no yast software utility, etc.... Other distributions btw. started to patch on the distri level: E.g. Fedora: * Thu Apr 28 2011 Tomas Mraz <tmraz at redhat.com> 1.0.0d-3 - add support for VIA Padlock on 64bit arch from upstream (#617539) Thanks / Gruesse - Franz Reproducible: Always Steps to Reproduce: 1.openssl engine padlock 2. 3. Actual Results: 140353542751912:error:260B606D:engine routines:DYNAMIC_LOAD:init failed:eng_dyn.c:521: 140353542751912:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:417:id=padlock Expected Results: expected it to work :-) $ cat /proc/cpuinfo processor : 0 vendor_id : CentaurHauls cpu family : 6 model : 15 model name : VIA Nano X2 U4025 @ 1.2 GHz stepping : 12 cpu MHz : 1067.000 cache size : 1024 KB physical id : 0 siblings : 2 core id : 0 cpu cores : 1 apicid : 0 initial apicid : 0 fpu : yes fpu_exception : yes cpuid level : 10 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat clflush acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc rep_good nopl pni monitor vmx est tm2 ssse3 cx16 xtpr sse4_1 popcnt rng rng_en ace ace_en ace2 phe phe_en pmm pmm_en lahf_lm ida bogomips : 2400.14 clflush size : 64 cache_alignment : 128 address sizes : 36 bits physical, 48 bits virtual power management: processor : 1 vendor_id : CentaurHauls cpu family : 6 model : 15 model name : VIA Nano X2 U4025 @ 1.2 GHz stepping : 12 cpu MHz : 1067.000 cache size : 1024 KB physical id : 0 siblings : 2 core id : 0 cpu cores : 1 apicid : 2 initial apicid : 2 fpu : yes fpu_exception : yes cpuid level : 10 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat clflush acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc rep_good nopl pni monitor vmx est tm2 ssse3 cx16 xtpr sse4_1 popcnt rng rng_en ace ace_en ace2 phe phe_en pmm pmm_en lahf_lm ida bogomips : 2400.14 clflush size : 64 cache_alignment : 128 address sizes : 36 bits physical, 48 bits virtual power management: $uname -a Linux verleihnix 3.4.6-2.10-desktop #1 SMP PREEMPT x86_64 x86_64 x86_64 GNU/Linux -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.