Re: Soekris vpn1411 (Hifn 7955) not working

[christos%astron.com@localhost (Christos Zoulas)]

In article <20080604205107.GA29280%moray.salmi.ch@localhost>,
Jukka Salmi  <j+nbsd%2008.salmi.ch@localhost> wrote:
>Christos Zoulas --> tech-embed (2008-06-04 20:20:03 +0000):
>> Can you try a kernel with CRYPTO_DEBUG?
>
>Sure. Now I get EINVAL for SIOCSESSION if kern.usercrypto is set (I
>guess this is expected):
>
>$ sysctl kern.usercrypto
>kern.usercrypto = 1
>
>$ openssl version
>SIOCSESSION violates kernel parameters 22
>SIOCSESSION violates kernel parameters 22
>OpenSSL 0.9.8e 23 Feb 2007
>
>$ openssl speed -elapsed -evp des
>SIOCSESSION violates kernel parameters 22
>SIOCSESSION violates kernel parameters 22
>You have chosen to measure elapsed time instead of user CPU time.
>To get the most accurate results, try to run this
>program when this computer is idle.
>Doing des-cbc for 3s on 16 size blocks: 78765 des-cbc's in 3.01s
>Doing des-cbc for 3s on 64 size blocks: 21179 des-cbc's in 3.00s
>Doing des-cbc for 3s on 256 size blocks: 5396 des-cbc's in 3.00s
>Doing des-cbc for 3s on 1024 size blocks: 1353 des-cbc's in 3.00s
>Doing des-cbc for 3s on 8192 size blocks: 168 des-cbc's in 3.02s
>OpenSSL 0.9.8e 23 Feb 2007
>built on: NetBSD 4.0_STABLE
>options:bn(32,32) md2(int) rc4(ptr,int) des(ptr,risc2,16,long)
>aes(partial) blowfish(ptr2) 
>compiler: gcc version 4.1.2 20061021 (prerelease) (NetBSD nb3 20061125)
>available timing options: USE_TOD HZ=100 [sysconf value]
>timing function used: gettimeofday
>The 'numbers' are in 1000s of bytes per second processed.
>type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
>des-cbc            418.87k      451.15k      459.72k      461.09k      455.66k
>
>$ sudo sysctl -w kern.usercrypto=0
>kern.usercrypto: 1 -> 0
>
>$ openssl version
>OpenSSL 0.9.8e 23 Feb 2007
>
>$ openssl speed -elapsed -evp des
>You have chosen to measure elapsed time instead of user CPU time.
>To get the most accurate results, try to run this
>program when this computer is idle.
>Doing des-cbc for 3s on 16 size blocks: 78827 des-cbc's in 3.01s
>Doing des-cbc for 3s on 64 size blocks: 21148 des-cbc's in 3.00s
>Doing des-cbc for 3s on 256 size blocks: 5379 des-cbc's in 3.00s
>Doing des-cbc for 3s on 1024 size blocks: 1350 des-cbc's in 3.01s
>Doing des-cbc for 3s on 8192 size blocks: 168 des-cbc's in 3.02s
>OpenSSL 0.9.8e 23 Feb 2007
>built on: NetBSD 4.0_STABLE
>options:bn(32,32) md2(int) rc4(ptr,int) des(ptr,risc2,16,long)
>aes(partial) blowfish(ptr2) 
>compiler: gcc version 4.1.2 20061021 (prerelease) (NetBSD nb3 20061125)
>available timing options: USE_TOD HZ=100 [sysconf value]
>timing function used: gettimeofday
>The 'numbers' are in 1000s of bytes per second processed.
>type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
>des-cbc            419.44k      450.47k      458.28k      459.86k      455.58k

Try setting devallowsoft to 0...
...
 * crypto_devallowsoft < 0:  Force userlevel requests to use software
 *                              transforms, always
 * crypto_devallowsoft = 0:  Use hardware if present, grant userlevel
 *                              requests for non-accelerated transforms  
 *                              (handling the latter in software)
 * crypto_devallowsoft > 0:  Allow user requests only for transforms which 
 *                               are hardware-accelerated.
...

christos