On 2015-06-22, nusenu <[email protected]> wrote: > >> when starting tor on OpenBSD, tor complains about missing >> accelerated support for P-224/P-256: >> >>> [notice] We were built to run on a 64-bit CPU, with OpenSSL >>> 1.0.1 or later, but with a version of OpenSSL that apparently >>> lacks accelerated support for the NIST P-224 and P-256 groups. >>> Building openssl with such support (using the >>> enable-ec_nistp_64_gcc_128 option when configuring it) would make >>> ECDH much faster. >> >> What is the preferred way to add support for that? >> >> I'm installing tor from ports via cd /usr/ports/net/tor make >> install >> >> on OpenBSD 5.7. > > I found this: > http://article.gmane.org/gmane.os.openbsd.misc/218924 > > so it should be available but it is not enabled by default. > >
We tried that before, it breaks SSH with ecdsa keys.
