From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 06 Mar 2026 11:02:04 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vyS0R-008dap-0p for lore@lore.pengutronix.de; Fri, 06 Mar 2026 11:02:04 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1vyS0R-0001YC-Vr; Fri, 06 Mar 2026 11:02:04 +0100 Received: from drehscheibe.grey.stw.pengutronix.de ([2a0a:edc0:0:c01:1d::a2]) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1vyS0J-0001Wr-ES; Fri, 06 Mar 2026 11:01:55 +0100 Received: from pty.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::c5]) by drehscheibe.grey.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vyS0H-0041rs-2J; Fri, 06 Mar 2026 11:01:55 +0100 Received: from mol by pty.whiteo.stw.pengutronix.de with local (Exim 4.98.2) (envelope-from ) id 1vyS0I-000000049w8-43o9; Fri, 06 Mar 2026 11:01:54 +0100 Date: Fri, 6 Mar 2026 11:01:54 +0100 From: Michael Olbrich To: ptxdist@pengutronix.de, christian.melki@t2data.com Message-ID: Mail-Followup-To: ptxdist@pengutronix.de, christian.melki@t2data.com, Ladislav Michl , Alexander Dahl References: <20260304120201.3180281-1-ada@thorsis.com> <89bcb787-0d67-4781-9b0d-cb08e12db5d4@t2data.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <89bcb787-0d67-4781-9b0d-cb08e12db5d4@t2data.com> X-Sent-From: Pengutronix Hildesheim X-URL: http://www.pengutronix.de/ X-Accept-Language: de,en X-Accept-Content-Type: text/plain X-IRC: #ptxdist @freenode Subject: Re: [ptxdist] [RFC PATCH 0/2] openssl: Add more hw acceleration support options X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Alexander Dahl , Ladislav Michl Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false On Wed, Mar 04, 2026 at 05:14:29PM +0100, Christian Melki wrote: > On 3/4/26 1:01 PM, Alexander Dahl via ptxdist wrote: > > I was experimenting with crypto hardware acceleration on microchip at91 > > sam9x60 based hardware [1] and stumbled over two things in ptxdist > > openssl package. Our usecases (for example lighttpd + TLS) seems not to > > benefit from kTLS, cryptodev, or AF_ALG on this platform, but I leave > > this here for reference if anyone wants to pick it up. > > > > The reaseon why it is marked RFC: the shared objects in > > /usr/lib/engines-3 are rather small (especially compared to > > /usr/lib/libcrypto.so.3), so maybe install all of them unconditionally > > with `install_tree()` instead? > > > > Note: openssl drops engine support with the upcoming 4.0 release. > > Support may come back with 4.1 as provider, but 4.0 will probably come > > without support for cryptodev and af_alg: See > > https://github.com/openssl/project/issues/1318 and linked tickets for > > details. > > > > There is nothing wrong with this apart from pretty much the last section > as objection. Engine support is dead according to the openssl team, > weather the world likes it or not. If this can't be built/installed in > 4.0, why not wait until 4.1 then? So I don't know yet what the general fallout of 4.x will be, but I expect that we will stick to 3.5 (the current LTS) for a while longer. So I'm open to patches like this. If we update sooner than I expect, we'll remove or disable it. If someone needs it then they can find it in the history and go back to 3.5.x (at least as long as it's supported). > I'm still super interested in how the world is going to cope without all > the engine support for all vendor whatnots that is out there. I expect 3.5.x will be around for a while... Michael -- Pengutronix e.K. | | Steuerwalder Str. 21 | http://www.pengutronix.de/ | 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 | Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |