What OS on the system, and what version of that OS? ----- Eric F Crist
On Dec 16, 2013, at 11:22:42, Colin Ryan <col...@caveo.ca> wrote: > Folks, > > Realize that this might technically belong on the dev list but..thinking > since while hand built it's all pretty stock that some of you might be > seeing something like this. > > I've been using OpenVPN and OpenSSL on VIA chipsets with the Padlock > crypto acceleration functions for a number of years now starting with > patched 0.9.8 OpenSSL's and OpenVPN 2.1 beta's without issues. > > Now however I'm having troubles with my build of openvpn 2.3.2 > > * When using the "engine padlock" directive I get: > > Note: OpenSSL hardware crypto engine functionality is not available > > * I'm running a 2.6.32 based kernel with the built in padlock modules: > > Dec 13 00:48:22 kernel: padlock: Using VIA PadLock ACE for SHA1/SHA256 > algorithms. > > Dec 13 00:48:22 kernel: padlock: Using VIA PadLock ACE for AES algorithm. > > > * I'm using OpenSSL 1.0.1e which seems to be ok for Padlock > > OpenSSL 1.0.1e 11 Feb 2013 > > OpenSSL> engine > > (dynamic) Dynamic engine loading support > > (4758cca) IBM 4758 CCA hardware engine support > > (aep) Aep hardware engine support > > (atalla) Atalla hardware engine support > > (cswift) CryptoSwift hardware engine support > > (chil) CHIL hardware engine support > > (nuron) Nuron hardware engine support > > (sureware) SureWare hardware engine support > > (ubsec) UBSEC hardware engine support > > (padlock) VIA PadLock (no-RNG, ACE) > > (gost) Reference implementation of GOST engine > > > However as mentioned OpenVPN does not seem to be finding the Padlock > engine anymore. > > ./openvpn --show-engines > > Sorry, OpenSSL hardware crypto engine functionality is not available. > > > > Now I'll admit (sic) that I'm hand building all this but I've been using > the same process for years. > > Because I build my own OpenSSL as well as my distribution doesn't keep > up quickly enough for my tastes I even looked at the build systems > OpenSSL lib's and the padlock components are there so it's not like I > can imagine that it's picked up an incorrect environment. > > My OpenVPN build info via --versions is: > > OpenVPN 2.3.2 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] > [IPv6] built on Oct 3 2013 > > Originally developed by James Yonan > > Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <sa...@openvpn.net> > > Compile time defines: enable_crypto=yes enable_debug=yes enable_def_auth=yes > enable_dlopen=unknown enable_dlopen_self=unknown > enable_dlopen_self_static=unknown enable_eurephia=yes enable_fast_install=yes > enable_fragment=yes enable_http_proxy=yes enable_iproute2=no > enable_libtool_lock=yes enable_lzo=yes enable_lzo_stub=no > enable_management=yes enable_multi=yes enable_multihome=yes > enable_pam_dlopen=no enable_password_save=no enable_pedantic=no enable_pf=yes > enable_pkcs11=no enable_plugin_auth_pam=yes enable_plugin_down_root=yes > enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes > enable_shared=yes enable_shared_with_static_runtimes=no enable_small=no > enable_socks=yes enable_ssl=yes enable_static=yes enable_strict=no > enable_strict_options=no enable_systemd=no enable_win32_dll=yes > enable_x509_alt_username=no with_crypto_library=openssl with_gnu_ld=yes > with_mem_check=no with_plugindir='$(libdir)/openvpn/plugins' with_ssl=/opt/aa > with_sysroot=no > > > > > Any insights or idea's would be greatly appreciated. > > Thank you > > Colin Ryan > > > > ------------------------------------------------------------------------------ > Rapidly troubleshoot problems before they affect your business. Most IT > organizations don't have a clear picture of how application performance > affects their revenue. With AppDynamics, you get 100% visibility into your > Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! > http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk > _______________________________________________ > Openvpn-users mailing list > Openvpn-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/openvpn-users
signature.asc
Description: Message signed with OpenPGP using GPGMail
------------------------------------------------------------------------------ Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
