Re: pkg/36517 (builtin.mk fails to detect the Solaris built in OpenSSL)

[Jörn Clausen <joernc%googlemail.com@localhost>]

The following reply was made to PR pkg/36517; it has been noted by GNATS.

From: =?ISO-8859-1?Q?J=F6rn_Clausen?= <joernc%googlemail.com@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: solaris-pkg-people%netbsd.org@localhost, pkgsrc-bugs%netbsd.org@localhost, 
        gnats-admin%netbsd.org@localhost, jperkin%netbsd.org@localhost, 
Lloyd.Parkes%ird.govt.nz@localhost
Subject: Re: pkg/36517 (builtin.mk fails to detect the Solaris built in OpenSSL)
Date: Thu, 7 Feb 2013 15:59:01 +0100

 Just for the record: On Sparc, the "native" version of OpenSSL
 (/usr/sfw/bin/openssl) is significantly faster than the one compiled
 from pkgsrc, at least with standard compiler options, and for most of
 the algorithms:
 
 OpenSSL 0.9.7d 17 Mar 2004 (+ security fixes for: CVE-2005-2969
 CVE-2006-2937 CVE-2006-2940 CVE-2006-3738 CVE-2006-4339 CVE-2006-4343
 CVE-2007-5135 CVE-2008-5077 CVE-2009-0590)
 type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
 md5               5067.21k    17566.61k    49591.13k    91534.34k   121629.35k
 hmac(md5)         8104.42k    25877.74k    64060.76k   102259.37k   123863.04k
 sha1              5138.62k    17033.11k    42430.38k    72883.20k    92228.27k
 rmd160            4348.91k    11437.06k    27559.81k    42526.04k    50662.06k
 rc4              83807.53k   105162.26k   113817.77k   116205.57k   116176.21k
 
 versus a not-so-old version from pkgsrc:
 
 OpenSSL 0.9.8x 10 May 2012
 built on: Thu Oct 18 15:51:58 CEST 2012
 options:bn(64,32) md2(int) rc4(ptr,char) des(idx,cisc,16,long)
 aes(partial) blowfish(ptr)
 compiler: gcc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT
 -DDSO_DLFCN -DHAVE_DLFCN_H -O -O3 -fomit-frame-pointer -Wall
 -DB_ENDIAN -DBN_DIV2W
 type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
 md5               7147.72k    22352.38k    53795.16k    82647.38k    97883.48k
 hmac(md5)         7385.30k    22827.86k    54280.28k    82848.43k    97921.71k
 sha1              3696.81k     8823.53k    16139.78k    20247.21k    21686.95k
 rmd160            1400.98k     3082.84k     5371.90k     6588.07k     7080.62k
 rc4              65909.05k    72306.30k    74684.16k    75298.13k    75412.82k
 
 Especially sha1 is much faster with native OpenSSL. We had to switch
 back from pkgsrc to native for our radius server, because it was not
 able to provide the necessary performance.
 
 Again, just for the record. No change requested.
 
 
 On Thu, Feb 7, 2013 at 3:07 PM,  <jperkin%netbsd.org@localhost> wrote:
 > Synopsis: builtin.mk fails to detect the Solaris built in OpenSSL
 >
 > State-Changed-From-To: open->closed
 > State-Changed-By: jperkin%NetBSD.org@localhost
 > State-Changed-When: Thu, 07 Feb 2013 14:07:25 +0000
 > State-Changed-Why:
 > It's likely that the OpenSSL in pkgsrc is now more suitable than that
 > provided in the base system, but in any case this can be tweaked by
 > setting PREFER_NATIVE appropriately.
 >
 >
 >
 
 
 
 -- 
 Joern Clausen
 http://thebloeg.blogspot.com/
 http://www.oe-files.de/photography/