Re: [ptxdist] [RFC PATCH 0/2] openssl: Add more hw acceleration support options

[Christian Melki <christian.melki@t2data.com>]

On 3/4/26 1:01 PM, Alexander Dahl via ptxdist wrote:
> I was experimenting with crypto hardware acceleration on microchip at91
> sam9x60 based hardware [1] and stumbled over two things in ptxdist
> openssl package.  Our usecases (for example lighttpd + TLS) seems not to
> benefit from kTLS, cryptodev, or AF_ALG on this platform, but I leave
> this here for reference if anyone wants to pick it up.
> 
> The reaseon why it is marked RFC: the shared objects in
> /usr/lib/engines-3 are rather small (especially compared to
> /usr/lib/libcrypto.so.3), so maybe install all of them unconditionally
> with `install_tree()` instead?
> 
> Note: openssl drops engine support with the upcoming 4.0 release.
> Support may come back with 4.1 as provider, but 4.0 will probably come
> without support for cryptodev and af_alg: See
> https://github.com/openssl/project/issues/1318 and linked tickets for
> details.
> 

There is nothing wrong with this apart from pretty much the last section
as objection. Engine support is dead according to the openssl team,
weather the world likes it or not. If this can't be built/installed in
4.0, why not wait until 4.1 then?

I'm still super interested in how the world is going to cope without all
the engine support for all vendor whatnots that is out there.

Regards,
Christian

> Greets
> Alex
> 
> [1] https://developerhelp.microchip.com/xwiki/bin/view/applications/linux4sam/faq/crypto-config/
> 
> Alexander Dahl (2):
>   openssl: Install cryptodev shared object to target
>   openssl: Add option for AF_ALG support
> 
>  rules/openssl.in   |  7 +++++++
>  rules/openssl.make | 10 ++++++++++
>  2 files changed, 17 insertions(+)
> 
> 
> base-commit: 938919627b16d7e2a9558ce1316fb4e42245479c