Re: HTTPS trust anchors in sysinst

[Mouse <mouse%Rodents-Montreal.ORG@localhost>]

> Yay!  New build of latest current was a bit more successful.  Here
> are the results from "openssl speed" on a VAXstation 4000/90.  Mind
> it, it's a bit on the fast side among VAXen...

> Gnat:/home/bqt> openssl speed
> Doing md5 for 3s on 16 size blocks: 7403 md5's in 2.99s
[186 lines snipped]
> Doing 512 bits  ecdh's for 10s: 2 512-bits ECDH ops in 12.74s
> Doing 253 bits  ecdh's for 10s: 68 253-bits ECDH ops in 10.14s
> ECDH computations don't match.
> Doing 253 bits sign Ed25519's for 10s: 184 253 bits Ed25519 signs in 10.07s
> Doing 253 bits verify Ed25519's for 10s: 58 253 bits Ed25519 verify in 
> 10.11s
> Doing 456 bits sign Ed448's for 10s: 29 456 bits Ed448 signs in 10.13s
> EdDSA verify failure.  No EdDSA verify will be done.
> Doing 256 bits sign CurveSM2's for 10s: 8 256 bits CurveSM2 signs in 8.82s

I find those "don't match" and "verify failure" lines disturbing.  If
they mean what they appear to, that seems to me to imply that it might
not work to verify this way on VAXen at all, since the verification can
fail when it shouldn't.

/~\ The ASCII				  Mouse
\ / Ribbon Campaign
 X  Against HTML		mouse%rodents-montreal.org@localhost
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B