Date: Sun, 20 Aug 2000 04:21:02 -0700 (PDT) From: Mike Harding <mvh@ix.netcom.com> To: kris@FreeBSD.org Cc: stable@FreeBSD.org Subject: Re: HEADS UP: OpenSSL 0.9.5a merge Message-ID: <20000820112102.37099E6A02@netcom1.netcom.com> In-Reply-To: <Pine.BSF.4.21.0008200358400.18826-100000@freefall.freebsd.org> (message from Kris Kennaway on Sun, 20 Aug 2000 04:08:08 -0700 (PDT)) References: <Pine.BSF.4.21.0008200358400.18826-100000@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Good morning! I am not the only one with insomnia. :)
You sent me a patch set earlier but I could not get it to work. I
think I can use the ports static libraries and put them in /usr/lib
(ick) and then build Apache_modssl. Admittedly a hack but I need.
I'll post my results.
- Mike Harding
X-Authentication-Warning: freefall.freebsd.org: kris owned process doing -bs
Date: Sun, 20 Aug 2000 04:08:08 -0700 (PDT)
From: Kris Kennaway <kris@FreeBSD.org>
Cc: stable@FreeBSD.org
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-RULES: lists
On Sun, 20 Aug 2000, Mike Harding wrote:
>
> Kris - is there going to be a way in make.conf or similar to pick up
> the assembly routines for RSA and the bulk crypto? It's twice as fast
> as the C version that was being built for 0.9.4, at least for RSA.
> Some of us commercial users have to double up the boxes or buy
> accelerators or explain why we're not using Linux to support lots of
> cold RSA connections.
Yes, I have patches but need to figure out how they should be enabled: we
need to do it properly, which means having a way to tell "make world" what
types of CPU-specific optimizations (i.e. asm code) it should perform
(e.g. if you have a Pentium II but there are no pentium II-specific
optimizations, you still want pentium optimizations).
> Failing that, can the ports be used to build Apache_modssl for
> 4-stable users?
If performance is critical you can remove the FORBIDDEN check in the
openssl port (I assume thats what you meant) and use that, but it's not
really supported and you may have to do some other hackery to bsd.port.mk
to make it not look at the system version.
Kris
--
In God we Trust -- all others must submit an X.509 certificate.
-- Charles Forsythe <forsythe@alum.mit.edu>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000820112102.37099E6A02>