Re: [ptxdist] [RFC PATCH 0/2] openssl: Add more hw acceleration support options

[Michael Olbrich <m.olbrich@pengutronix.de>]

On Wed, Mar 04, 2026 at 05:14:29PM +0100, Christian Melki wrote:
> On 3/4/26 1:01 PM, Alexander Dahl via ptxdist wrote:
> > I was experimenting with crypto hardware acceleration on microchip at91
> > sam9x60 based hardware [1] and stumbled over two things in ptxdist
> > openssl package.  Our usecases (for example lighttpd + TLS) seems not to
> > benefit from kTLS, cryptodev, or AF_ALG on this platform, but I leave
> > this here for reference if anyone wants to pick it up.
> > 
> > The reaseon why it is marked RFC: the shared objects in
> > /usr/lib/engines-3 are rather small (especially compared to
> > /usr/lib/libcrypto.so.3), so maybe install all of them unconditionally
> > with `install_tree()` instead?
> > 
> > Note: openssl drops engine support with the upcoming 4.0 release.
> > Support may come back with 4.1 as provider, but 4.0 will probably come
> > without support for cryptodev and af_alg: See
> > https://github.com/openssl/project/issues/1318 and linked tickets for
> > details.
> > 
> 
> There is nothing wrong with this apart from pretty much the last section
> as objection. Engine support is dead according to the openssl team,
> weather the world likes it or not. If this can't be built/installed in
> 4.0, why not wait until 4.1 then?

So I don't know yet what the general fallout of 4.x will be, but I expect
that we will stick to 3.5 (the current LTS) for a while longer.

So I'm open to patches like this.

If we update sooner than I expect, we'll remove or disable it. If someone
needs it then they can find it in the history and go back to 3.5.x (at
least as long as it's supported).

> I'm still super interested in how the world is going to cope without all
> the engine support for all vendor whatnots that is out there.

I expect 3.5.x will be around for a while...

Michael

-- 
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |