David Boyes wrote:
Earlier versions of Bacula used OpenSSL, until they got shirty about
the license. I still have old versions of the servers that I run on
systems that have hardware SSL accelerators (zSeries), and it works
fine if your openssl.cnf is set up to use it AND your SSL engine
supports symmetric offload (Bacula doesn't make/break connections that
often, so the accelerators that don't include the symmetric offload
don't really help much).
The card I'm dealing with does indeed support AES-128-CBC (the symmetric
cipher that Bacula is *documented* to use; although the Bacula code
appears as if AES-160-CBC AES-192-CBC may be used if supported), as well
as RSA/DSA. I'm dealing with the *BSD cryptodev engine, which is
supported by OpenSSL.
Out of curiosity, what older version of Bacula are you referring to?
------------------------------------------------------------------------------
_______________________________________________
Bacula-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-devel
