Re: [Ltib] usage/intention of PKG_OPENSSL_WANT_SEC

[Stuart Hughes]

Hi Gernot,

You've got it about right.  IIRC at one point there was kernel assist
for SEC hardware acceleration for just the "mcf547x_8x" (using the SEC
block).

The older openssl-0.9.7g.spec is still referenced by cobra5475 and
mcf547x_8x, so it can't be removed.

I also think having the config available is a good thing as the plumbing
is there if someone updates the .spec file to provide a general solution
for using hardware SEC.

Regards, Stuart


Gernot Hillier wrote:
> Hi there!
> 
> I was looking for a way to tell OpenSSL to use the cryptodev-based
> engine as default. On that way, I found the LTIB option
> PKG_OPENSSL_WANT_SEC to my great surprise which promised to exactly
> provide what I was looking for.
> 
> However, after a closer look, it seems that this option is more or less
> obsolete - it seems it only works for the combination OpenSSL 0.9.7g and
> platform "mcf547x_8x". At least, openssl-0.9.7g-sec.patch is the only
> occurence I found which implements this feature.
> 
> Is this correct or did I overlook something?
> 
> If my assumptions are correct, I consider this option to be quite
> obsolete and think it should be removed from the general LTIB
> configuration - at least until someone provides a portable solution
> based on a current OpenSSL for it.
> 
> Opinions?
>