Rogerio, I guess you have to download the latest OpenSSH package from Novell Customer Center site (which is restricted to customers with valid agreements, BTW), and then install it using 'yast -i <package>', which will properly 'rebuild' OpenSSH for dynamic engine load support.
If my understanding is correct (and, please, correct me if it is wrong), the OpenSSH packages inserted onto the base media don't enable support for such, thus needing the latest package from Novell. HTH (and sorry for any delay!) Pedro From: Rogério Soares <rogerio.soa...@gmail.com> To: LINUX-390@vm.marist.edu Date: 12/02/2011 19:03 Subject: Re: crypto with sshd Sent by: Linux on 390 Port <LINUX-390@vm.marist.edu> Mike, i have installed all packages describe on paper.. appears like sshd is not calling icalib, i just have recompile sshd with --ssl-engine, is just it ? i do not understand very well on paper if the "PTF" is just is or something more... :-/ On Sat, Feb 12, 2011 at 1:38 AM, Leland Lucius <lluc...@homerow.net> wrote: > Another way of telling is to transfer a LARGE file with your > pre-crypto sshd and again with your post-crypto sshd. Just watch the > difference it makes in your favorite z/VM performance monitor. You > won't necessarily realize an improvement in throughput, but the amount > of CPU consumed drops considerably. > > Leland > > 2011/2/11 Rogério Soares <rogerio.soa...@gmail.com>: > > Hello dears, > > > > I have set up a test machine to use crpto card... my wish is using that > > with sshd... so, i installed : > > > > • openssh > > • openssl > > • openssl-ibmca > > • libica > > • z90crypt > > > > made changes on openssl.cnf to use libica engine, load z90crypt module > and > > after that i get openssh from source rpm and rebuild then with > --ssl-engine > > , and then made a rpm -Uvhm restart the daemon.. > > > > on SLES10SP3 i don't have the icastats command, so, how can i be sure > that > > crypto card is used by openssh ? > > > > > > i made several connections and take a look on /proc/driver/z90crypt, but > the > > number don't change... are this process is correct or i missing > something? > > > > Thanks again. :) > > > > ---------------------------------------------------------------------- > > For LINUX-390 subscribe / signoff / archive access instructions, > > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or > visit > > http://www.marist.edu/htbin/wlvindex?LINUX-390 > > ---------------------------------------------------------------------- > > For more information on Linux on System z, visit > > http://wiki.linuxvm.org/ > > > > ---------------------------------------------------------------------- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or > visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > ---------------------------------------------------------------------- > For more information on Linux on System z, visit > http://wiki.linuxvm.org/ > ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
