From owner-freebsd-stable@FreeBSD.ORG  Wed Nov 28 16:51:46 2007
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from freefall.freebsd.org (localhost [127.0.0.1])
	by hub.freebsd.org (Postfix) with SMTP id 9073216A420;
	Wed, 28 Nov 2007 16:51:45 +0000 (UTC)
	(envelope-from nork@FreeBSD.org)
Date: Thu, 29 Nov 2007 01:51:44 +0900
From: Norikatsu Shigemura <nork@FreeBSD.org>
To: Mike Tancsa <mike@sentex.net>, Harald Schmalzbauer
	<h.schmalzbauer@omnisec.de>
Message-Id: <20071129015144.24c67521.nork@FreeBSD.org>
In-Reply-To: <200711271237.lARCbdMB077950@lava.sentex.ca>
References: <20071127092729.189bcbae@titan.flintsbach.schmalzbauer.de>
	<200711271237.lARCbdMB077950@lava.sentex.ca>
X-Mailer: Sylpheed 2.4.7 (GTK+ 2.12.1; i386-portbld-freebsd8.0)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Cc: freebsd-stable@freebsd.org, simon@FreeBSD.org
Subject: Re: cryptodev and ssh on RELENG_7
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Nov 2007 16:51:46 -0000

On Tue, 27 Nov 2007 07:37:49 -0500
Mike Tancsa <mike@sentex.net> wrote:
> >I have a HiFN crypto card and can remember that it was used for ssh
> >connections with 3des encryption (on 6.1 afair).
> >But with RELENG_7 it isn't used at all (no interrupts) if I
> >'ssh -v -c 3des-cbc user@host'
> >Any ideas what is wrong?
> >dmesg:
> >hifn0 mem
> >0x80000000-0x80000fff,0x80040000-0x80041fff,0x80080000-0x80087fff irq
> >12 at device 13.0 on pci0 hifn0: [ITHREAD] hifn0: Hifn 7955, rev 0,
> >32KB dram, pll=0x801<ext clk, 4x mult>
> >crw-rw-rw-  1 root  wheel  -   0,  41 Nov 27 08:13:41 2007 /dev/crypto
> Hi,
>          Are you sure you have device crypto and device cryptodev in 
> the kernel?  Also, there is a program in 
> /usr/src/tools/tools/crypto  called hifnstats.  It will show some 
> usuage stats. e.g.

	This issue is one of a gcc42 issue.  But gcc42 is not wrong.
	OpenSSL has a using __FreeBSD_version issue.  So to fix this
	issue, you should apply following patch.

--- crypto/openssl/crypto/engine/eng_cryptodev.c.orig	2006-07-30 04:10:18.000000000 +0900
+++ crypto/openssl/crypto/engine/eng_cryptodev.c	2007-11-08 01:55:35.000000000 +0900
@@ -32,7 +32,7 @@
 #include <openssl/bn.h>
 
 #if (defined(__unix__) || defined(unix)) && !defined(USG) && \
-	(defined(OpenBSD) || defined(__FreeBSD_version))
+	(defined(OpenBSD) || defined(__FreeBSD__))
 #include <sys/param.h>
 # if (OpenBSD >= 200112) || ((__FreeBSD_version >= 470101 && __FreeBSD_version < 500000) || __FreeBSD_version >= 500041)
 #  define HAVE_CRYPTODEV