maybe i made some confusion here... i' can't get any call to libica, that is why a guess that is not working ... :-/
On Mon, Feb 14, 2011 at 7:56 PM, Marcy Cortes <marcy.d.cor...@wellsfargo.com > wrote: > Ok, good that works. > And you should seen some incrementing in all those zero's down at the > bottom of /proc/drivers/z90crypt, correct? > > And you don't see any on SSH leading you to believe its not working for > ssh? > > > > Marcy Cortes > > Operating Systems Engineer, z/VM and Linux on System z > Enterprise Hosting Services, Mainframe/Midrange Services > > Wells Fargo Bank | 201 Third Street | San Francisco, CA 94103 > MAC A0187-050 > Tel 415-477-6343 | Cell 415-517-0895 > > marcy.d.cor...@wellsfargo.com > > This message may contain confidential and/or privileged information. If you > are not the addressee or authorized to receive this for the addressee, you > must not use, copy, disclose, or take any action based on this message or > any information herein. If you have received this message in error, please > advise the sender immediately by reply e-mail and delete this message. Thank > you for your cooperation. > > > -----Original Message----- > From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of > Rogério Soares > Sent: Monday, February 14, 2011 1:41 PM > To: LINUX-390@vm.marist.edu > Subject: Re: [LINUX-390] crypto with sshd > > Marcy, > > with > > #openssl_conf = openssl_def > > > jbsp124:~ # openssl speed -evp des-ede3-cbc > Doing des-ede3-cbc for 3s on 16 size blocks: 4132050 des-ede3-cbc's in > 2.94s > Doing des-ede3-cbc for 3s on 64 size blocks: 1090654 des-ede3-cbc's in > 2.95s > Doing des-ede3-cbc for 3s on 256 size blocks: 276504 des-ede3-cbc's in > 2.97s > Doing des-ede3-cbc for 3s on 1024 size blocks: 69077 des-ede3-cbc's in > 2.96s > Doing des-ede3-cbc for 3s on 8192 size blocks: 8580 des-ede3-cbc's in 2.94s > OpenSSL 0.9.8a 11 Oct 2005 > built on: Mon Jul 27 13:51:43 UTC 2009 > options:bn(64,64) md2(int) rc4(ptr,int) des(idx,cisc,4,long) aes(partial) > blowfish(idx) > compiler: gcc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT > -DDSO_DLFCN > -DHAVE_DLFCN_H -DB_ENDIAN -DNO_ASM -DMD32_REG_T=int -O2 -fmessage-length=0 > -Wall -g -fomit-frame-pointer -fno-strict-aliasing -DTERMIO -Wall > -fstack-protector -fbranch-probabilities -DB_ENDIAN -DNO_ASM > available timing options: TIMES TIMEB HZ=100 [sysconf value] > timing function used: times > The 'numbers' are in 1000s of bytes per second processed. > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > bytes > des-ede3-cbc 22487.35k 23661.65k 23833.34k 23896.91k > 23907.27k > > > with > > openssl_conf = openssl_def > > jbsp124:~ # vi /etc/ssl/openssl.cnf > jbsp124:~ # openssl speed -evp des-ede3-cbc > Doing des-ede3-cbc for 3s on 16 size blocks: 12827073 des-ede3-cbc's in > 2.97s > Doing des-ede3-cbc for 3s on 64 size blocks: 8270315 des-ede3-cbc's in > 2.97s > Doing des-ede3-cbc for 3s on 256 size blocks: 3360218 des-ede3-cbc's in > 2.97s > Doing des-ede3-cbc for 3s on 1024 size blocks: 1006040 des-ede3-cbc's in > 2.98s > Doing des-ede3-cbc for 3s on 8192 size blocks: 132563 des-ede3-cbc's in > 2.98s > OpenSSL 0.9.8a 11 Oct 2005 > built on: Mon Jul 27 13:51:43 UTC 2009 > options:bn(64,64) md2(int) rc4(ptr,int) des(idx,cisc,4,long) aes(partial) > blowfish(idx) > compiler: gcc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT > -DDSO_DLFCN > -DHAVE_DLFCN_H -DB_ENDIAN -DNO_ASM -DMD32_REG_T=int -O2 -fmessage-length=0 > -Wall -g -fomit-frame-pointer -fno-strict-aliasing -DTERMIO -Wall > -fstack-protector -fbranch-probabilities -DB_ENDIAN -DNO_ASM > available timing options: TIMES TIMEB HZ=100 [sysconf value] > timing function used: times > The 'numbers' are in 1000s of bytes per second processed. > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 > bytes > des-ede3-cbc 69102.08k 178215.54k 289634.95k 345699.65k > 364414.80k > jbsp124:~ # > > > > > On Mon, Feb 14, 2011 at 7:19 PM, Marcy Cortes < > marcy.d.cor...@wellsfargo.com > > wrote: > > > You have no card accessible to Linux. > > > > Do you have a OPTION CRYPTO APVIRT in your directory entry > > What do you get when you type > > > > Q CRYPTO AP on VM. > > > > > > > > Marcy > > > > > > -----Original Message----- > > From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of > > Rogério Soares > > Sent: Monday, February 14, 2011 1:14 PM > > To: LINUX-390@vm.marist.edu > > Subject: Re: [LINUX-390] crypto with sshd > > > > and yes, i'm running under vm 6.1. > > > > > > > > On Mon, Feb 14, 2011 at 7:07 PM, Marcy Cortes < > > marcy.d.cor...@wellsfargo.com > > > wrote: > > > > > I'm pretty sure SLES 10 SP3's openssh is already built correctly and > you > > > should not have to rebuild it. > > > What do you get when you > > > cat /proc/drivers/z90crypt (please post) > > > Are you running under VM? > > > > > > > > > Marcy > > > > > > -----Original Message----- > > > From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of > > > Rogério Soares > > > Sent: Monday, February 14, 2011 12:53 PM > > > To: LINUX-390@vm.marist.edu > > > Subject: Re: [LINUX-390] crypto with sshd > > > > > > i get the rpm source version from SLES10SP3 to openssh-4.2p1-18.40.35 > > > package and change de spec file to include --ssl-engine and made a > > rpmbuild > > > .. that is why asking.. on paper is not clear if the change is only > this > > or > > > something more... thanks anyway. > > > > > > > > > > > > On Mon, Feb 14, 2011 at 6:43 PM, Mark Post <mp...@novell.com> wrote: > > > > > > > >>> On 2/14/2011 at 03:08 PM, Rogério Soares< > rogerio.soa...@gmail.com> > > > > wrote: > > > > > Mark, i already did it too.. > > > > > > > > > > jbsp124:~ # openssl engine > > > > > (dynamic) Dynamic engine loading support > > > > > (ibmca) Ibmca hardware engine support > > > > > jbsp124:~ # > > > > > jbsp124:~ # > > > > > jbsp124:~ # rpm -qa | grep openss > > > > > openssl-devel-0.9.8a-18.36 > > > > > openssl-0.9.8a-18.36 > > > > > openssh-askpass-4.2p1-18.40.35 > > > > > openssl-ibmca-1.0.0-7.16 > > > > > compat-openssl097g-0.9.7g-13.16 > > > > > openssh-4.2p1-18.40.35 > > > > > > > > > > on sshd server the only change is enable --ssl-engine ? > > > > > > > > You need to have a version of openSSH with the patch that actually > > > enables > > > > the use of SSL. In the IBM paper, they were working with an modified > > > > version of openssh-5.1p1. I doubt very much that a copy of the 4.2p1 > > > source > > > > is going to have that. > > > > > > > > > > > > Mark Post > > > > > > > > > ---------------------------------------------------------------------- > > > > For LINUX-390 subscribe / signoff / archive access instructions, > > > > send email to lists...@vm.marist.edu with the message: INFO > LINUX-390 > > or > > > > visit > > > > http://www.marist.edu/htbin/wlvindex?LINUX-390 > > > > > ---------------------------------------------------------------------- > > > > For more information on Linux on System z, visit > > > > http://wiki.linuxvm.org/ > > > > > > > > > > ---------------------------------------------------------------------- > > > For LINUX-390 subscribe / signoff / archive access instructions, > > > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 > or > > > visit > > > http://www.marist.edu/htbin/wlvindex?LINUX-390 > > > ---------------------------------------------------------------------- > > > For more information on Linux on System z, visit > > > http://wiki.linuxvm.org/ > > > > > > ---------------------------------------------------------------------- > > > For LINUX-390 subscribe / signoff / archive access instructions, > > > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 > or > > > visit > > > http://www.marist.edu/htbin/wlvindex?LINUX-390 > > > ---------------------------------------------------------------------- > > > For more information on Linux on System z, visit > > > http://wiki.linuxvm.org/ > > > > > > > ---------------------------------------------------------------------- > > For LINUX-390 subscribe / signoff / archive access instructions, > > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or > > visit > > http://www.marist.edu/htbin/wlvindex?LINUX-390 > > ---------------------------------------------------------------------- > > For more information on Linux on System z, visit > > http://wiki.linuxvm.org/ > > > > ---------------------------------------------------------------------- > > For LINUX-390 subscribe / signoff / archive access instructions, > > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or > > visit > > http://www.marist.edu/htbin/wlvindex?LINUX-390 > > ---------------------------------------------------------------------- > > For more information on Linux on System z, visit > > http://wiki.linuxvm.org/ > > > > ---------------------------------------------------------------------- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or > visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > ---------------------------------------------------------------------- > For more information on Linux on System z, visit > http://wiki.linuxvm.org/ > > ---------------------------------------------------------------------- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or > visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > ---------------------------------------------------------------------- > For more information on Linux on System z, visit > http://wiki.linuxvm.org/ > ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
