t,
HRB 243294
From:
Philip Rowlands
To:
LINUX-390@vm.marist.edu
Date:
15.02.2011 21:34
Subject:
Re: crypto with sshd
Sent by:
Linux on 390 Port
On 15/02/2011 20:26, Sterling James wrote:
> I starting to get a little confused, since I thought this provided
openssh
> the use of Open
On 15/02/2011 20:26, Sterling James wrote:
I starting to get a little confused, since I thought this provided openssh
the use of OpenSSL dynamic engine loading support, so that the ibmca
engine can now use Central Processor Assist for Cryptographic Function
(CPACF). If that were true, use of CPAC
I starting to get a little confused, since I thought this provided openssh
the use of OpenSSL dynamic engine loading support, so that the ibmca
engine can now use Central Processor Assist for Cryptographic Function
(CPACF). If that were true, use of CPACF would not be reflected in
/proc/driver/
On 2/15/11 10:19 AM, Rogério Soares wrote:
>
> but, i shoud be able to see some increase on Per-device successfully
> completed request counts ?
>
> Thanks for you attention :)
>
Yes, they do increase for me each time I login via ssh:
pzsadm01:~ # cat /proc/driver/z90crypt
zcrypt version: 2.1.
Leland, i rebuild the package with your flags, now a see a a difference at
least.. the cpu usage by ssh was very low...:
PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+
COMMAND
16814 root 16 0 6004 2704 2064 R 82 0.1 0:38.65 /usr/bin/ssh -x
-oForwardAgent no -oClearAllForw
On 2/12/11 3:03 PM, Rogério Soares wrote:
> Mike, i have installed all packages describe on paper.. appears like sshd is
> not calling icalib, i just have recompile sshd with --ssl-engine, is just it
> ? i do not understand very well on paper if the "PTF" is just is or
> something more...
>
When I
ent: Monday, February 14, 2011 2:23 PM
> To: LINUX-390@vm.marist.edu
> Subject: Re: [LINUX-390] crypto with sshd
>
> another thing is SSHD cpu usage.. with or without, on large transfer cpu
> usage is practicaly the same ...
>
> 2011/2/14 Rogério Soares
>
> > maybe i made s
Do you have on the openCrypto* packages?
Marcy
-Original Message-
From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of Rogério
Soares
Sent: Monday, February 14, 2011 2:23 PM
To: LINUX-390@vm.marist.edu
Subject: Re: [LINUX-390] crypto with sshd
another thing is SSHD
age. Thank you for your cooperation.
>>
>>
>> -----Original Message-
>> From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of
>> Rogério Soares
>> Sent: Monday, February 14, 2011 1:41 PM
>> To: LINUX-390@vm.marist.edu
>> Subject: Re: [LI
for your cooperation.
>
>
> -Original Message-
> From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of
> Rogério Soares
> Sent: Monday, February 14, 2011 1:41 PM
> To: LINUX-390@vm.marist.edu
> Subject: Re: [LINUX-390] crypto with sshd
>
> Marcy,
>
>
ooperation.
-Original Message-
From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of Rogério
Soares
Sent: Monday, February 14, 2011 1:41 PM
To: LINUX-390@vm.marist.edu
Subject: Re: [LINUX-390] crypto with sshd
Marcy,
with
#openssl_conf = openssl_def
jbsp124:~ # openssl
ry entry
> What do you get when you type
>
> Q CRYPTO AP on VM.
>
>
>
> Marcy
>
>
> -Original Message-
> From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of
> Rogério Soares
> Sent: Monday, February 14, 2011 1:14 PM
> To: LINUX-390@vm.m
, February 14, 2011 1:14 PM
To: LINUX-390@vm.marist.edu
Subject: Re: [LINUX-390] crypto with sshd
and yes, i'm running under vm 6.1.
On Mon, Feb 14, 2011 at 7:07 PM, Marcy Cortes wrote:
> I'm pretty sure SLES 10 SP3's openssh is already built correctly and you
> should not have to
: RE: [LINUX-390] crypto with sshd
You have no card accessible to Linux.
Do you have a OPTION CRYPTO APVIRT in your directory entry
What do you get when you type
Q CRYPTO AP on VM.
Marcy
-Original Message-
From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of
> Are you running under VM?
>
>
> Marcy
>
> -Original Message-
> From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of
> Rogério Soares
> Sent: Monday, February 14, 2011 12:53 PM
> To: LINUX-390@vm.marist.edu
> Subject: Re: [LINUX-390] cryp
Are you running under VM?
>
>
> Marcy
>
> -Original Message-
> From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of
> Rogério Soares
> Sent: Monday, February 14, 2011 12:53 PM
> To: LINUX-390@vm.marist.edu
> Subject: Re: [LINUX-390] crypto with
st.edu] On Behalf Of Rogério
Soares
Sent: Monday, February 14, 2011 12:53 PM
To: LINUX-390@vm.marist.edu
Subject: Re: [LINUX-390] crypto with sshd
i get the rpm source version from SLES10SP3 to openssh-4.2p1-18.40.35
package and change de spec file to include --ssl-engine and made a rpmbuild
.. t
i get the rpm source version from SLES10SP3 to openssh-4.2p1-18.40.35
package and change de spec file to include --ssl-engine and made a rpmbuild
.. that is why asking.. on paper is not clear if the change is only this or
something more... thanks anyway.
On Mon, Feb 14, 2011 at 6:43 PM, Mark Pos
>>> On 2/14/2011 at 03:08 PM, Rogério Soares wrote:
> Mark, i already did it too..
>
> jbsp124:~ # openssl engine
> (dynamic) Dynamic engine loading support
> (ibmca) Ibmca hardware engine support
> jbsp124:~ #
> jbsp124:~ #
> jbsp124:~ # rpm -qa | grep openss
> openssl-devel-0.9.8a-18.36
> opens
Mark, i already did it too..
jbsp124:~ # openssl engine
(dynamic) Dynamic engine loading support
(ibmca) Ibmca hardware engine support
jbsp124:~ #
jbsp124:~ #
jbsp124:~ # rpm -qa | grep openss
openssl-devel-0.9.8a-18.36
openssl-0.9.8a-18.36
openssh-askpass-4.2p1-18.40.35
openssl-ibmca-1.0.0-7.16
c
>>> On 2/12/2011 at 04:03 PM, Rogério Soares wrote:
> i have installed all packages describe on paper.. appears like sshd is
> not calling icalib, i just have recompile sshd with --ssl-engine, is just it
> ? i do not understand very well on paper if the "PTF" is just is or
> something more...
You
Date: 12/02/2011 19:03
Subject: Re: crypto with sshd
Sent by:Linux on 390 Port
Mike, i have installed all packages describe on paper.. appears like sshd
is
not calling icalib, i just have recompile sshd with --ssl-engine, is just
it
? i do not understand very well on paper i
Mike, i have installed all packages describe on paper.. appears like sshd is
not calling icalib, i just have recompile sshd with --ssl-engine, is just it
? i do not understand very well on paper if the "PTF" is just is or
something more...
:-/
On Sat, Feb 12, 2011 at 1:38 AM, Leland Lucius wr
Another way of telling is to transfer a LARGE file with your
pre-crypto sshd and again with your post-crypto sshd. Just watch the
difference it makes in your favorite z/VM performance monitor. You
won't necessarily realize an improvement in throughput, but the amount
of CPU consumed drops conside
gt;
>
>
>
>
>
>
>
>
>
>
>
> Rogério Soares
> mail.com> To
> Sent by: Linux on LINUX-390@vm.marist.edu
> 390 Port cc
>
To
Sent by: Linux on LINUX-390@vm.marist.edu
390 Port cc
Subject
Hello dears,
I have set up a test machine to use crpto card... my wish is using that
with sshd... so, i installed :
• openssh
• openssl
• openssl-ibmca
• libica
• z90crypt
made changes on openssl.cnf to use libica engine, load z90crypt module and
after that i get openssh from source rpm and re
27 matches
Mail list logo
