Re: We want to add a switch to openssl's zlib compression methord

2011-06-14 Thread Guan Jun He
>>> On 6/10/2011 at 09:35 PM, in message <20110610133552.ga26...@panix.com>, >>> Thor Lancelot Simon wrote: > On Fri, Jun 10, 2011 at 01:01:49PM +0200, Dr. Stephen Henson wrote: >> >> There is SSL_OP_NO_COMPRESSION. > > In that case, the suggestion to provide a config file setting for > defa

Re: We want to add a switch to openssl's zlib compression methord

2011-06-10 Thread Thor Lancelot Simon
On Fri, Jun 10, 2011 at 01:01:49PM +0200, Dr. Stephen Henson wrote: > > There is SSL_OP_NO_COMPRESSION. In that case, the suggestion to provide a config file setting for default options seems particularly excellent. Thor __ Open

Re: We want to add a switch to openssl's zlib compression methord

2011-06-10 Thread Dr. Stephen Henson
On Wed, Jun 08, 2011, Thor Lancelot Simon wrote: > On Tue, Jun 07, 2011 at 10:58:20PM -0600, Guan Jun He wrote: > > Hi, Openssl Developpers: > > > > We have a platform with cryptographic hardware,and we try to take > > advantage > > of the platform's hardware cryptographic features.But openSS

Re: We want to add a switch to openssl's zlib compression methord

2011-06-10 Thread Ludwig Nussel
Thor Lancelot Simon wrote: > On Thu, Jun 09, 2011 at 05:08:30PM +0200, Ludwig Nussel wrote: > > Thor Lancelot Simon wrote: > > > > > > Again, I think this should be configured via an option on the SSL_CTX. > > > > There is no way to set the default context options via config file > > though, righ

Re: We want to add a switch to openssl's zlib compression methord

2011-06-09 Thread Guan Jun He
Thanks a lot for your reply! >>> On 6/8/2011 at 09:42 PM, in message <20110608134254.ga6...@panix.com>, Thor Lancelot Simon wrote: > On Tue, Jun 07, 2011 at 10:58:20PM -0600, Guan Jun He wrote: >> Hi, Openssl Developpers: >> >> We have a platform with cryptographic hardware,and we try to take

Re: We want to add a switch to openssl's zlib compression methord

2011-06-09 Thread Thor Lancelot Simon
On Thu, Jun 09, 2011 at 05:08:30PM +0200, Ludwig Nussel wrote: > Thor Lancelot Simon wrote: > > > > Again, I think this should be configured via an option on the SSL_CTX. > > There is no way to set the default context options via config file > though, right? So every application would need to be

Re: We want to add a switch to openssl's zlib compression methord

2011-06-09 Thread Ludwig Nussel
Thor Lancelot Simon wrote: > On Tue, Jun 07, 2011 at 10:58:20PM -0600, Guan Jun He wrote: > > Hi, Openssl Developpers: > > > > We have a platform with cryptographic hardware,and we try to take > > advantage > > of the platform's hardware cryptographic features.But openSSL compresses > > data

Re: We want to add a switch to openssl's zlib compression methord

2011-06-08 Thread Thor Lancelot Simon
On Tue, Jun 07, 2011 at 10:58:20PM -0600, Guan Jun He wrote: > Hi, Openssl Developpers: > > We have a platform with cryptographic hardware,and we try to take advantage > of the platform's hardware cryptographic features.But openSSL compresses data > before the encryption, having a massive perf

We want to add a switch to openssl's zlib compression methord

2011-06-08 Thread Guan Jun He
Hi, Openssl Developpers: We have a platform with cryptographic hardware,and we try to take advantage of the platform's hardware cryptographic features.But openSSL compresses data before the encryption, having a massive performance impact(throughput decrease, CPU load increase) on platforms wi