On a recent new install the rc scripts got stuck on isakmpd generating
RSA host keys, so I ctrl-c'd it after a while, then it immediately got
stuck at ssh-keygen doing RSA keys also, so I had to kill that one
too.
After a few attempts, I've noticed that there is something off with
the RSA and my manual ssh-keygen -A has been consuming 100% cpu for
the last 38 cpu-minutes now.
The RSA problem can be seen differ on my openssl tests on both amd64
and octeons:
First octeon DSA, then RSA:
edgepro# openssl speed dsa2048
Doing 2048 bit sign dsa for 10s: 246 2048 bit DSA signs in 9.92s
Doing 2048 bit verify dsa for 10s: 223 2048 bit DSA verify in 9.96s
LibreSSL 4.1.0
built on: date not available
compiler: information not available
sign verify sign/s verify/s
dsa 2048 bits 0.040325s 0.044664s 24.8 22.4
Everything fine with the above speed test
edgepro# openssl speed rsa2048
Doing 2048 bit private rsa for 10s: 434 2048 bit private RSA in 9.99s
RSA verify failure. No RSA verify will be done.
277892405248:error:04FFF06A:rsa routines:CRYPTO_internal:block type is
not 01:/usr/src/lib/libcrypto/rsa/rsa_pk1.c:134:
277892405248:error:04FFF072:rsa routines:CRYPTO_internal:padding check
failed:/usr/src/lib/libcrypto/rsa/rsa_eay.c:646:
LibreSSL 4.1.0
built on: date not available
compiler: information not available
So openssl speed breaks for some reason on RSA, but a newly upgraded
snapshot on amd64 VM can run "openssl speed rsa2048" fine:
# openssl speed rsa2048
Doing 2048 bit private rsa for 10s: 1041 2048 bit private RSA in 5.49s
Doing 2048 bit public rsa for 10s: 20070 2048 bit public RSA in 6.55s
LibreSSL 4.1.0
built on: date not available
compiler: information not available
sign verify sign/s verify/s
rsa 2048 bits 0.005276s 0.000327s 189.5 3061.9
Both are linked to libs of same version
amd64: /usr/bin/openssl:
Start End Type Open Ref GrpRef Name
000009496c459000 000009496c4f0000 exe 1 0 0 /usr/bin/openssl
0000094c1d48d000 0000094c1d4fa000 rlib 0 1 0
/usr/lib/libssl.so.60.1
0000094bb5542000 0000094bb578f000 rlib 0 2 0
/usr/lib/libcrypto.so.57.1
0000094bdb506000 0000094bdb60c000 rlib 0 1 0
/usr/lib/libc.so.102.0
0000094b9f017000 0000094b9f017000 ld.so 0 1 0
/usr/libexec/ld.so
Octeon:
edgepro# ldd $(which openssl)
/usr/bin/openssl:
Start End Type Open Ref GrpRef Name
0000001130030000 00000011300e8000 exe 1 0 0 /usr/bin/openssl
00000015ef2d0000 00000015ef39c000 rlib 0 1 0
/usr/lib/libssl.so.60.1
00000015bc6d8000 00000015bc9cc000 rlib 0 2 0
/usr/lib/libcrypto.so.57.1
00000015e7ee0000 00000015e8070000 rlib 0 1 0
/usr/lib/libc.so.102.0
00000015665b0000 00000015665b0000 ld.so 0 1 0
/usr/libexec/ld.so
dmesg from octeon:
[ using 773256 bytes of bsd ELF symbol table ]
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California. All rights reserved.
Copyright (c) 1995-2025 OpenBSD. All rights reserved. https://www.OpenBSD.org
OpenBSD 7.7-current (GENERIC.MP) #54: Mon Sep 1 06:25:21 MDT 2025
[email protected]:/usr/src/sys/arch/octeon/compile/GENERIC.MP
real mem = 4294967296 (4096MB)
avail mem = 4239048704 (4042MB)
random: good seed from bootblocks
mainbus0 at root: board 20003 rev 0.14, model ubnt,e200
cpu0 at mainbus0: CN61xx CPU rev 0.1 1000 MHz, Software FP emulation
cpu0: cache L1-I 37KB 37 way D 32KB 32 way, L2 1024KB 8 way
cpu1 at mainbus0: CN61xx CPU rev 0.1 1000 MHz, Software FP emulation
cpu1: cache L1-I 37KB 37 way D 32KB 32 way, L2 1024KB 8 way
clock0 at mainbus0: int 5
octcrypto0 at mainbus0
iobus0 at mainbus0
simplebus0 at iobus0: "soc"
octciu0 at simplebus0
octgpio0 at simplebus0: 20 pins, xbit 16
octsmi0 at simplebus0
octsmi1 at simplebus0
octpip0 at simplebus0
octgmx0 at octpip0 interface 0
cnmac0 at octgmx0: port 0 SGMII, address 24:a4:3c:b3:e2:13
ukphy0 at cnmac0 phy 4: Generic IEEE 802.3u media interface, rev. 3:
OUI 0x180361, model 0x0004
cnmac1 at octgmx0: port 1 SGMII, address 24:a4:3c:b3:e2:14
ukphy1 at cnmac1 phy 5: Generic IEEE 802.3u media interface, rev. 3:
OUI 0x180361, model 0x0004
cnmac2 at octgmx0: port 2 SGMII, address 24:a4:3c:b3:e2:15
brgphy0 at cnmac2 phy 0: BCM5482, rev. 2
cnmac3 at octgmx0: port 3 SGMII, address 24:a4:3c:b3:e2:16
brgphy1 at cnmac3 phy 1: BCM5482, rev. 2
octgmx1 at octpip0 interface 1
cnmac4 at octgmx1: port 16 SGMII, address 24:a4:3c:b3:e2:17
ukphy2 at cnmac4 phy 0: Generic IEEE 802.3u media interface, rev. 3:
OUI 0x180361, model 0x0004
cnmac5 at octgmx1: port 17 SGMII, address 24:a4:3c:b3:e2:18
ukphy3 at cnmac5 phy 1: Generic IEEE 802.3u media interface, rev. 3:
OUI 0x180361, model 0x0004
cnmac6 at octgmx1: port 18 SGMII, address 24:a4:3c:b3:e2:19
ukphy4 at cnmac6 phy 2: Generic IEEE 802.3u media interface, rev. 3:
OUI 0x180361, model 0x0004
cnmac7 at octgmx1: port 19 SGMII, address 24:a4:3c:b3:e2:1a
ukphy5 at cnmac7 phy 3: Generic IEEE 802.3u media interface, rev. 3:
OUI 0x180361, model 0x0004
"i2c" at simplebus0 not configured
"i2c" at simplebus0 not configured
com0 at simplebus0: ns16550a, 64 byte fifo
com0: console
com1 at simplebus0: ns16550a, 64 byte fifo
com1: probed fifo depth: 0 bytes
"spi" at simplebus0 not configured
octmmc0 at simplebus0
sdmmc0 at octmmc0: 8-bit, mmc high-speed
"bootbus" at simplebus0 not configured
"dma-engine" at simplebus0 not configured
"dma-engine" at simplebus0 not configured
octuctl0 at simplebus0
ehci0 at octuctl0
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 configuration 1 interface 0 "Octeon EHCI root hub" rev
2.00/1.00 addr 1
ohci0 at octuctl0, version 1.0
usb1 at ohci0: USB revision 1.0
uhub1 at usb1 configuration 1 interface 0 "Octeon OHCI root hub" rev
1.00/1.00 addr 1
octrng0 at iobus0 base 0x1400000000000 irq 0
octpcie0 at iobus0: 2 ports
octpcie0 port 1: reset timeout
scsibus0 at sdmmc0: 2 targets, initiator 0
sd0 at scsibus0 targ 1 lun 0: <Sandisk, SEM04G, 0000> removable
sd0: 3776MB, 512 bytes/sector, 7733248 sectors
vscsi0 at root
scsibus1 at vscsi0: 256 targets
softraid0 at root
scsibus2 at softraid0: 256 targets
root on sd0a (1f341b1e46896d85.a) swap on sd0b dump on sd0b
WARNING: CHECK AND RESET THE DATE!
--
May the most significant bit of your life be positive.
