tech-pkg archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Call for testers: OpenSSL 1.0.1c
Hi,
I'd like to upgrade security/openssl to 1.0.1c. The primary driver
for us is to get AES-NI support and the resulting significant increase
in performance on modern hardware.
For example, on my i7 OSX laptop where I tested the package update for
Darwin, I see the following results for 'speed -evp aes-128-cbc':
# Base system 'OpenSSL 0.9.8r 8 Feb 2011'
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
aes-128-cbc 157297.05k 173874.73k 176805.45k 177719.17k 179441.78k
# Current pkgsrc 'OpenSSL 0.9.8x 10 May 2012'
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
aes-128-cbc 136604.39k 148140.15k 152662.74k 153582.38k 154220.14k
# Proposed pkgsrc 'OpenSSL 1.0.1c 10 May 2012'
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
aes-128-cbc 643315.29k 685811.37k 696899.67k 699977.39k 693968.90k
The diff is available here:
http://www.netbsd.org/~jperkin/openssl-1.0.1c.diff
One change from the current package which may possibly bite people is
the removal of MD2 to follow the default OpenSSL configuration. I
note that NetBSD's 1.0.1c retains MD2 support, and I'd be interested
in feedback as to whether I should do the same in pkgsrc.
I've tested this on SmartOS and Darwin, and plan to do some bulk
builds and further tests prior to commit, but given the core nature of
this package I'd appreciate further testing and feedback too.
Thanks,
--
Jonathan Perkin - Joyent, Inc. - www.joyent.com
Home |
Main Index |
Thread Index |
Old Index