Bug#607914: [Pkg-openssl-devel] Bug#607914: Bug#607914: please enable padlock engine for 1.0.0 version of openssl

2012-02-25 Thread Kurt Roeckx
On Sat, Feb 25, 2012 at 05:41:17PM +0100, JM wrote: > apt-get -b source openssl > dpkg -i libssl1.0.0_1.0.0g-1_i386.deb openssl_1.0.0g-1_i386.deb > openssl s_server -cert /etc/ssl/private/server.crt -key > /etc/ssl/private/server.key -ssl3 -engine padlock -state -msg -debug > on a separate terminal

Bug#607914: [Pkg-openssl-devel] Bug#607914: Bug#607914: please enable padlock engine for 1.0.0 version of openssl

2012-02-25 Thread JM
On Thu, Feb 23, 2012 at 7:29 PM, Kurt Roeckx wrote: > On Thu, Feb 23, 2012 at 07:26:02PM +0100, JM wrote: >> Update: >> >> I have found out that the nginx error is a result of a regression in >> openssl that took place between versions 1.0.0d and 1.0.0e. >> >> I suppose it would be best if I opene

Bug#607914: [Pkg-openssl-devel] Bug#607914: Bug#607914: please enable padlock engine for 1.0.0 version of openssl

2012-02-23 Thread Kurt Roeckx
On Thu, Feb 23, 2012 at 07:26:02PM +0100, JM wrote: > On Wed, Feb 22, 2012 at 08:09:56PM +0100, JM wrote: > > > > Sure, please find the config file attached. > > > > I have set up nginx with https (1.1.14-1) and indeed it does fail with > > padlock enabled: > > 3074644120:error:140943FC:SSL routine

Bug#607914: [Pkg-openssl-devel] Bug#607914: Bug#607914: please enable padlock engine for 1.0.0 version of openssl

2012-02-23 Thread JM
On Wed, Feb 22, 2012 at 08:09:56PM +0100, JM wrote: > > Sure, please find the config file attached. > > I have set up nginx with https (1.1.14-1) and indeed it does fail with > padlock enabled: > 3074644120:error:140943FC:SSL routines:SSL3_READ_BYTES:sslv3 alert bad > record mac:s3_pkt.c:1195:SSL a

Bug#607914: [Pkg-openssl-devel] Bug#607914: Bug#607914: please enable padlock engine for 1.0.0 version of openssl

2012-02-22 Thread Kurt Roeckx
On Wed, Feb 22, 2012 at 08:09:56PM +0100, JM wrote: > > Sure, please find the config file attached. > > I have set up nginx with https (1.1.14-1) and indeed it does fail with > padlock enabled: > 3074644120:error:140943FC:SSL routines:SSL3_READ_BYTES:sslv3 alert bad > record mac:s3_pkt.c:1195:SSL

Bug#607914: [Pkg-openssl-devel] Bug#607914: Bug#607914: please enable padlock engine for 1.0.0 version of openssl

2012-02-22 Thread Kurt Roeckx
On Wed, Feb 22, 2012 at 03:14:57PM +0100, JM wrote: > I would like to confirm that openssl.cnf provided by Kurt Roeckx > enables padlock support. > > With the modified openssl.cnf 'openssl speed -evp aes-128-cbc' gives a > speed-up of over 40x (!) for 8192 blocks. Can you please attach the modifi

Bug#607914: [Pkg-openssl-devel] Bug#607914: please enable padlock engine for 1.0.0 version of openssl

2012-02-22 Thread JM
I would like to confirm that openssl.cnf provided by Kurt Roeckx enables padlock support. With the modified openssl.cnf 'openssl speed -evp aes-128-cbc' gives a speed-up of over 40x (!) for 8192 blocks. I have also verified that the padlock engine is being used by default by applications taking a

Bug#607914: [Pkg-openssl-devel] Bug#607914: please enable padlock engine, for 1.0.0 version of openssl

2011-07-05 Thread Armin Müller
Hi, i subscribe a "Bug" for Version 0.9.80 (Bug# 622387) because the Padlock Module is missing at all. Does the 1.0.0 Version work with Padlock on a 64bit Mashine? Guess its also missed there, can anyone figured it out? Thx Armin -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.

Bug#607914: [Pkg-openssl-devel] Bug#607914: please enable padlock engine for 1.0.0 version of openssl

2011-01-05 Thread Kurt Roeckx
On Wed, Jan 05, 2011 at 08:46:34AM +, kie...@pawsoff.org wrote: > > it looks like it either doesnt work, or openssl 1.0.0 is loading padlock > automatically. Then I'm saying it's not working, because I clearly see a difference in behaviour with and without the config file change. Without it

Bug#607914: [Pkg-openssl-devel] Bug#607914: please enable padlock engine for 1.0.0 version of openssl

2011-01-05 Thread kieran
On Fri, Dec 24, 2010 at 04:25:59PM +0100, Kurt Roeckx wrote: > On Fri, Dec 24, 2010 at 01:27:20PM +, kie...@pawsoff.org wrote: > > On Fri, Dec 24, 2010 at 02:23:32PM +0100, Kurt Roeckx wrote: > > > On Fri, Dec 24, 2010 at 08:52:21AM +, kieran fulke wrote: > > > > Package: openssl > > > > Ve

Bug#607914: [Pkg-openssl-devel] Bug#607914: please enable padlock engine for 1.0.0 version of openssl

2011-01-04 Thread Kurt Roeckx
On Fri, Dec 24, 2010 at 04:25:59PM +0100, Kurt Roeckx wrote: > > Can you run "openssl speed aes" > > Then put the attached file in /etc/ssl/openssl.cnf > > And run "openssl speed aes" again? Hi, Did you try this? It would be very useful for me if someone can try this, so that I can do that wi

Bug#607914: [Pkg-openssl-devel] Bug#607914: please enable padlock engine for 1.0.0 version of openssl

2010-12-24 Thread Kurt Roeckx
On Fri, Dec 24, 2010 at 01:27:20PM +, kie...@pawsoff.org wrote: > On Fri, Dec 24, 2010 at 02:23:32PM +0100, Kurt Roeckx wrote: > > On Fri, Dec 24, 2010 at 08:52:21AM +, kieran fulke wrote: > > > Package: openssl > > > Version: 1.0.0c-2 > > > Severity: normal > > > > > > > > > # dpkg -l op

Bug#607914: [Pkg-openssl-devel] Bug#607914: please enable padlock engine for 1.0.0 version of openssl

2010-12-24 Thread kieran
On Fri, Dec 24, 2010 at 02:23:32PM +0100, Kurt Roeckx wrote: > On Fri, Dec 24, 2010 at 08:52:21AM +, kieran fulke wrote: > > Package: openssl > > Version: 1.0.0c-2 > > Severity: normal > > > > > > # dpkg -l openssl ; echo ; cat /proc/cpuinfo ; echo ; openssl engine > > Please try to run "ope

Bug#607914: [Pkg-openssl-devel] Bug#607914: please enable padlock engine for 1.0.0 version of openssl

2010-12-24 Thread Kurt Roeckx
On Fri, Dec 24, 2010 at 08:52:21AM +, kieran fulke wrote: > Package: openssl > Version: 1.0.0c-2 > Severity: normal > > > # dpkg -l openssl ; echo ; cat /proc/cpuinfo ; echo ; openssl engine Please try to run "openssl engine padlock". Kurt -- To UNSUBSCRIBE, email to debian-bugs-dist-

Bug#607914: please enable padlock engine for 1.0.0 version of openssl

2010-12-24 Thread kieran fulke
Package: openssl Version: 1.0.0c-2 Severity: normal # dpkg -l openssl ; echo ; cat /proc/cpuinfo ; echo ; openssl engine Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=b