[tor-relays] HW-Accelerated OpenSSL & Tor not playing nicely.

[Yawning Angel]

On Sat, 02 May 2015 09:42:42 -0400
12xBTM <12xbtm at gmail.com> wrote:

> Step 1: Getting OpenSSL to become Hardware-Accelerated
> 
> sudo apt-get install linux-image-3.14.39-ti-r61
> sudo apt-get install linux-headers-3.14.39-ti-r61
> wget
> http://download.gna.org/cryptodev-linux/cryptodev-linux-1.7.tar.gz
> tar zxf cryptodev-linux-1.7.tar.gz cd cryptodev-linux-1.7/
> sudo make
> sudo make install
> sudo depmod -a
> sudo modprobe cryptodev
> lsmod
> sudo sh -c 'echo cryptodev>>/etc/modules'
> cd ~
> wget https://www.openssl.org/source/openssl-1.0.2a.tar.gz
> tar zxf openssl-1.0.2a.tar.gz
> cd openssl-1.0.2a/

You left out, patching OpenSSL's cryptodev support to function.

> ls
> ./config -DHAVE_CRYPTODEV -DUSE_CRYPTDEV_DIGESTS shared
> sudo make
> sudo make install

And you left out "running the test suite, which according to the bug in
OpenSSL's bugtracker, would have failed".

Both of these dastardly details are hidden in the depths of the file
misleadingly titled "README" in cryptodev-linux-1.7.tar.gz, under the
heading "* OpenSSL:".

Regards,

-- 
Yawning Angel
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20150502/3ac0f2e5/attachment.sig>