tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Call for testers: OpenSSL 1.0.1c



Hi,

I'd like to upgrade security/openssl to 1.0.1c.  The primary driver
for us is to get AES-NI support and the resulting significant increase
in performance on modern hardware.

For example, on my i7 OSX laptop where I tested the package update for
Darwin, I see the following results for 'speed -evp aes-128-cbc':

  # Base system 'OpenSSL 0.9.8r 8 Feb 2011'
  type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
  aes-128-cbc     157297.05k   173874.73k   176805.45k   177719.17k   179441.78k

  # Current pkgsrc 'OpenSSL 0.9.8x 10 May 2012'
  type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
  aes-128-cbc     136604.39k   148140.15k   152662.74k   153582.38k   154220.14k

  # Proposed pkgsrc 'OpenSSL 1.0.1c 10 May 2012'
  type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
  aes-128-cbc     643315.29k   685811.37k   696899.67k   699977.39k   693968.90k

The diff is available here:

  http://www.netbsd.org/~jperkin/openssl-1.0.1c.diff

One change from the current package which may possibly bite people is
the removal of MD2 to follow the default OpenSSL configuration.  I
note that NetBSD's 1.0.1c retains MD2 support, and I'd be interested
in feedback as to whether I should do the same in pkgsrc.

I've tested this on SmartOS and Darwin, and plan to do some bulk
builds and further tests prior to commit, but given the core nature of
this package I'd appreciate further testing and feedback too.

Thanks,

-- 
Jonathan Perkin  -  Joyent, Inc.  -  www.joyent.com


Home | Main Index | Thread Index | Old Index