[Pkg-openssl-devel] Re: OpenSSL and VIA Padlock

[Kurt Roeckx]

On Thu, Dec 29, 2005 at 01:03:57PM +0100, Jan Walzer wrote:
> 
> Hello,
> 
> I'm currently working on validating a VIA Box vor VPN-Usage
> and therefore want to use the Hardware-Engine in the processor.
> 
> My current Problem is that no Debian OpenSSL-Package seems to
> support the padlock engine yet. I've tried so far stable, testing
> and even a package build with apt-src myself.
> 
> Official upstream support seems to be there at least since v0.9.8.
> 
> Even though there is an padlock.c (that gets compiled) there doesn't
> exist /usr/lib/ssl/engines/libpadlock.so

The problem seems to be that if you compile a shared
library, everything needs to be shared.  It defines
OPENSSL_NO_STATIC_ENGINE and does not load the static
versions of the functions.  But it did link staticly to
those engines, and did not create any shared objects for
them.

So all the engines from crypto/engine/ are missing, while
those in engines/ seem to be there.

I wonder if those in crypto/engine are supposed to be only
used when OPENSSL_NO_STATIC_ENGINE is used.

I'll take a closer look later.


Kurt