On 6/16/2015 12:21 AM, Atul Thosar wrote:
Hi All,
From archives/google, I understood that the OpenSSL works/supported on Solaris
11 platform, but in our case, it's a bit different scenario.
Currently, we build OpenSSL v0.9.8zc on Solaris 10 (SunOS, sun4u, sparc) and it
works well on Solaris 10 platform. We use Sun Studio 12 compiler.
We would like to run it on Solaris 11.2 (SunOS, sun4v, sparc) platform w/o
changing the build platform. I mean we will continue to build OpenSSL on Solaris
10 and run it on Solaris 11.
Has anyone encounter such situation?Appreciate any help/pointers if this
mechanism will work?
Hi Atul
What Nico and Andy say are correct, but I would like to ask why you would be
interested in doing this? As is well known, 0.9.8 will be end-of-life by the end
of this year. Solaris 11.2 includes 1.0.1 with patches from 1.0.2 for SPARC
hardware acceleration. 1.0.1 already included Intel AESNI hardware
optimizations. 0.9.8 does not have those optimizations for either platform.
From a support model, we only do regression testing with the versions of
OpenSSL that we are shipping without operating system. As we know, many things
on Solaris to depend on OpenSSL, like SunSSH. We cannot guarantee that the
SunSSH that we are shipping on Solaris 11 will work and perform well on top of
0.9.8, due to the lack of ABI compatibility that we had with OpenSSL itself
between 0.9.8 and 1.0.0 (I do not offhand remember what those specific
incompatibilities were).
For further information about the OpenSSL version we are shipping with Solaris
11.2, see Misaki's blog:
https://blogs.oracle.com/observatory/entry/openssl_on_solaris_11_2
So, while the general principle should work, your time is probably better
invested in standardizing on 1.0.1.
Thank you,
Valerie
--
NOTE: Using voice recognition software, forgive typos/grammar mistakes!
Valerie Fenwick, http://bubbva.blogspot.com/ @bubbva
Solaris Cryptographic & Key Management Technologies, Manager
Oracle Corporation: 4180 Network Circle, Santa Clara, CA, 95054.
_______________________________________________
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
