From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Wed, 04 Mar 2026 13:02:25 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vxkvo-007yPg-2z for lore@lore.pengutronix.de; Wed, 04 Mar 2026 13:02:25 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1vxkvp-0001lQ-J9; Wed, 04 Mar 2026 13:02:25 +0100 Received: from mail.thorsis.com ([2003:a:e28:26e4::10]) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1vxkvY-0001cz-6B for ptxdist@pengutronix.de; Wed, 04 Mar 2026 13:02:11 +0100 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id F38421480808; Wed, 4 Mar 2026 13:02:01 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thorsis.com; s=dkim; t=1772625723; h=from:subject:date:message-id:to:cc:mime-version: content-transfer-encoding; bh=3mVYvtAnie00Z1Uf04lGfnqd0776bzOec5+7yCIg1v4=; b=rA0iJln+aUCp4G4JyACbrtKsUI1LY15l4IzMlK+6Far8hoqeodOX8Eu/1JyxhWe8Z6ZkoX DUY84ldMx4y0OqCfdItjFyY5gxT+goxLs8SM9i2RF9WoB4u90OWtCYoYUTHsQEHJCtkybB hkLRCnqO4h3Fencu6CkpSYuCU/Mmwo1O7AMah2FD7aSiSDuFeG7AKMyBRCQ2BpNh9lgp4a oyqY89J/8LwHX79kgEwiqUG8XdaI0aXFE6K4VHCrZ5wcUciAO4oFDth9dJ0kYxtVx3P15z bR3ysy52JyMXv+NBFQwf2raCvMzSLdMVm5fm8rNpOu3kXO2byQ9n2yQDzYhgWA== To: ptxdist@pengutronix.de Date: Wed, 4 Mar 2026 13:01:59 +0100 Message-ID: <20260304120201.3180281-1-ada@thorsis.com> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Last-TLS-Session-Version: TLSv1.3 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-3.2 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [RFC PATCH 0/2] openssl: Add more hw acceleration support options X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Alexander Dahl via ptxdist Reply-To: ptxdist@pengutronix.de Cc: Alexander Dahl , Ladislav Michl Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false I was experimenting with crypto hardware acceleration on microchip at91 sam9x60 based hardware [1] and stumbled over two things in ptxdist openssl package. Our usecases (for example lighttpd + TLS) seems not to benefit from kTLS, cryptodev, or AF_ALG on this platform, but I leave this here for reference if anyone wants to pick it up. The reaseon why it is marked RFC: the shared objects in /usr/lib/engines-3 are rather small (especially compared to /usr/lib/libcrypto.so.3), so maybe install all of them unconditionally with `install_tree()` instead? Note: openssl drops engine support with the upcoming 4.0 release. Support may come back with 4.1 as provider, but 4.0 will probably come without support for cryptodev and af_alg: See https://github.com/openssl/project/issues/1318 and linked tickets for details. Greets Alex [1] https://developerhelp.microchip.com/xwiki/bin/view/applications/linux4sam/faq/crypto-config/ Alexander Dahl (2): openssl: Install cryptodev shared object to target openssl: Add option for AF_ALG support rules/openssl.in | 7 +++++++ rules/openssl.make | 10 ++++++++++ 2 files changed, 17 insertions(+) base-commit: 938919627b16d7e2a9558ce1316fb4e42245479c -- 2.47.3