Folks, Realize that this might technically belong on the dev list but..thinking since while hand built it's all pretty stock that some of you might be seeing something like this.
I've been using OpenVPN and OpenSSL on VIA chipsets with the Padlock crypto acceleration functions for a number of years now starting with patched 0.9.8 OpenSSL's and OpenVPN 2.1 beta's without issues. Now however I'm having troubles with my build of openvpn 2.3.2 * When using the "engine padlock" directive I get: Note: OpenSSL hardware crypto engine functionality is not available * I'm running a 2.6.32 based kernel with the built in padlock modules: Dec 13 00:48:22 kernel: padlock: Using VIA PadLock ACE for SHA1/SHA256 algorithms. Dec 13 00:48:22 kernel: padlock: Using VIA PadLock ACE for AES algorithm. * I'm using OpenSSL 1.0.1e which seems to be ok for Padlock OpenSSL 1.0.1e 11 Feb 2013 OpenSSL> engine (dynamic) Dynamic engine loading support (4758cca) IBM 4758 CCA hardware engine support (aep) Aep hardware engine support (atalla) Atalla hardware engine support (cswift) CryptoSwift hardware engine support (chil) CHIL hardware engine support (nuron) Nuron hardware engine support (sureware) SureWare hardware engine support (ubsec) UBSEC hardware engine support (padlock) VIA PadLock (no-RNG, ACE) (gost) Reference implementation of GOST engine However as mentioned OpenVPN does not seem to be finding the Padlock engine anymore. ./openvpn --show-engines Sorry, OpenSSL hardware crypto engine functionality is not available. Now I'll admit (sic) that I'm hand building all this but I've been using the same process for years. Because I build my own OpenSSL as well as my distribution doesn't keep up quickly enough for my tastes I even looked at the build systems OpenSSL lib's and the padlock components are there so it's not like I can imagine that it's picked up an incorrect environment. My OpenVPN build info via --versions is: OpenVPN 2.3.2 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on Oct 3 2013 Originally developed by James Yonan Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <sa...@openvpn.net> Compile time defines: enable_crypto=yes enable_debug=yes enable_def_auth=yes enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_eurephia=yes enable_fast_install=yes enable_fragment=yes enable_http_proxy=yes enable_iproute2=no enable_libtool_lock=yes enable_lzo=yes enable_lzo_stub=no enable_management=yes enable_multi=yes enable_multihome=yes enable_pam_dlopen=no enable_password_save=no enable_pedantic=no enable_pf=yes enable_pkcs11=no enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_small=no enable_socks=yes enable_ssl=yes enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=no enable_win32_dll=yes enable_x509_alt_username=no with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_plugindir='$(libdir)/openvpn/plugins' with_ssl=/opt/aa with_sysroot=no Any insights or idea's would be greatly appreciated. Thank you Colin Ryan ------------------------------------------------------------------------------ Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
