Can not enable via padlock

classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|

Can not enable via padlock

Salatiel Filho
I am trying to test via padlock using 'openssl speed -engine padlock', but it fails.

# openssl version
OpenSSL 1.0.1c 10 May 2012

# openssl  engine padlock
140291115067048:error:260B606D:engine routines:DYNAMIC_LOAD:init failed:eng_dyn.c:521:
140291115067048:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:417:id=padlock

# strace openssl  engine padlock 2>&1 | grep -i padlock.so
open("/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so", O_RDONLY) = 3

# ls -la /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so
-rw-r--r-- 1 root root 6096 May 11 12:51 /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so

# dmesg | grep -i aes
[  284.335338] padlock: Using VIA PadLock ACE for AES algorithm.

# lsmod | grep -i aes
padlock_aes             5633  0
aes_generic            25714  1 padlock_aes



What am i doing wrong ?


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

RE: Can not enable via padlock

Peter Kurrasch

Are you combining version 1.0.1 and 1.0.0 ?

----------------------------------------

> From: [hidden email]
> Subject: Can not enable via padlock
> Date: Wed, 30 May 2012 20:26:45 -0300
> To: [hidden email]
>
> I am trying to test via padlock using 'openssl speed -engine padlock', but it fails.
>
> # openssl version
> OpenSSL 1.0.1c 10 May 2012
>
> # openssl engine padlock
> 140291115067048:error:260B606D:engine routines:DYNAMIC_LOAD:init failed:eng_dyn.c:521:
> 140291115067048:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:417:id=padlock
>
> # strace openssl engine padlock 2>&1 | grep -i padlock.so
> open("/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so", O_RDONLY) = 3
>
> # ls -la /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so
> -rw-r--r-- 1 root root 6096 May 11 12:51 /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so
>
> # dmesg | grep -i aes
> [ 284.335338] padlock: Using VIA PadLock ACE for AES algorithm.
>
> # lsmod | grep -i aes
> padlock_aes 5633 0
> aes_generic 25714 1 padlock_aes
>
>
>
> What am i doing wrong ?
>
>
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List [hidden email]
> Automated List Manager [hidden email]
     ______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: Can not enable via padlock

Salatiel Filho
No. Just installed from debian unstable repository.
apt-get -t unstable install openssl

[]'s
Salatiel


On Wed, May 30, 2012 at 8:33 PM, Peter Kurrasch <[hidden email]> wrote:

>
> Are you combining version 1.0.1 and 1.0.0 ?
>
> ----------------------------------------
>> From: [hidden email]
>> Subject: Can not enable via padlock
>> Date: Wed, 30 May 2012 20:26:45 -0300
>> To: [hidden email]
>>
>> I am trying to test via padlock using 'openssl speed -engine padlock', but it fails.
>>
>> # openssl version
>> OpenSSL 1.0.1c 10 May 2012
>>
>> # openssl engine padlock
>> 140291115067048:error:260B606D:engine routines:DYNAMIC_LOAD:init failed:eng_dyn.c:521:
>> 140291115067048:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:417:id=padlock
>>
>> # strace openssl engine padlock 2>&1 | grep -i padlock.so
>> open("/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so", O_RDONLY) = 3
>>
>> # ls -la /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so
>> -rw-r--r-- 1 root root 6096 May 11 12:51 /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so
>>
>> # dmesg | grep -i aes
>> [ 284.335338] padlock: Using VIA PadLock ACE for AES algorithm.
>>
>> # lsmod | grep -i aes
>> padlock_aes 5633 0
>> aes_generic 25714 1 padlock_aes
>>
>>
>>
>> What am i doing wrong ?
>>
>>
>> ______________________________________________________________________
>> OpenSSL Project http://www.openssl.org
>> User Support Mailing List [hidden email]
>> Automated List Manager [hidden email]
>                                          ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [hidden email]
> Automated List Manager                           [hidden email]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: Can not enable via padlock

Salatiel Filho
Any other ideas ?

[]'s
Salatiel


On Wed, May 30, 2012 at 8:40 PM, Salatiel Filho
<[hidden email]> wrote:

> No. Just installed from debian unstable repository.
> apt-get -t unstable install openssl
>
> []'s
> Salatiel
>
>
> On Wed, May 30, 2012 at 8:33 PM, Peter Kurrasch <[hidden email]> wrote:
>>
>> Are you combining version 1.0.1 and 1.0.0 ?
>>
>> ----------------------------------------
>>> From: [hidden email]
>>> Subject: Can not enable via padlock
>>> Date: Wed, 30 May 2012 20:26:45 -0300
>>> To: [hidden email]
>>>
>>> I am trying to test via padlock using 'openssl speed -engine padlock', but it fails.
>>>
>>> # openssl version
>>> OpenSSL 1.0.1c 10 May 2012
>>>
>>> # openssl engine padlock
>>> 140291115067048:error:260B606D:engine routines:DYNAMIC_LOAD:init failed:eng_dyn.c:521:
>>> 140291115067048:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:417:id=padlock
>>>
>>> # strace openssl engine padlock 2>&1 | grep -i padlock.so
>>> open("/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so", O_RDONLY) = 3
>>>
>>> # ls -la /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so
>>> -rw-r--r-- 1 root root 6096 May 11 12:51 /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so
>>>
>>> # dmesg | grep -i aes
>>> [ 284.335338] padlock: Using VIA PadLock ACE for AES algorithm.
>>>
>>> # lsmod | grep -i aes
>>> padlock_aes 5633 0
>>> aes_generic 25714 1 padlock_aes
>>>
>>>
>>>
>>> What am i doing wrong ?
>>>
>>>
>>> ______________________________________________________________________
>>> OpenSSL Project http://www.openssl.org
>>> User Support Mailing List [hidden email]
>>> Automated List Manager [hidden email]
>>                                          ______________________________________________________________________
>> OpenSSL Project                                 http://www.openssl.org
>> User Support Mailing List                    [hidden email]
>> Automated List Manager                           [hidden email]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: Can not enable via padlock

Michael S. Zick-4
On Thu May 31 2012, Salatiel Filho wrote:
> Any other ideas ?
>
Yes, wrong or incomplete Debian package installed.

Your strace shows 1.0.0 in the pathname of the libpadlock.so
it is trying to open.

Did your apt-get include a new libpadlock.so or perhaps that
is now packaged separately by Debian.
I.E: Perhaps you need to install an additional package for Via.

Mike

> []'s
> Salatiel
>
>
> On Wed, May 30, 2012 at 8:40 PM, Salatiel Filho
> <[hidden email]> wrote:
> > No. Just installed from debian unstable repository.
> > apt-get -t unstable install openssl
> >
> > []'s
> > Salatiel
> >
> >
> > On Wed, May 30, 2012 at 8:33 PM, Peter Kurrasch <[hidden email]> wrote:
> >>
> >> Are you combining version 1.0.1 and 1.0.0 ?
> >>
> >> ----------------------------------------
> >>> From: [hidden email]
> >>> Subject: Can not enable via padlock
> >>> Date: Wed, 30 May 2012 20:26:45 -0300
> >>> To: [hidden email]
> >>>
> >>> I am trying to test via padlock using 'openssl speed -engine padlock', but it fails.
> >>>
> >>> # openssl version
> >>> OpenSSL 1.0.1c 10 May 2012
> >>>
> >>> # openssl engine padlock
> >>> 140291115067048:error:260B606D:engine routines:DYNAMIC_LOAD:init failed:eng_dyn.c:521:
> >>> 140291115067048:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:417:id=padlock
> >>>
> >>> # strace openssl engine padlock 2>&1 | grep -i padlock.so
> >>> open("/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so", O_RDONLY) = 3
> >>>
> >>> # ls -la /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so
> >>> -rw-r--r-- 1 root root 6096 May 11 12:51 /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so
> >>>
> >>> # dmesg | grep -i aes
> >>> [ 284.335338] padlock: Using VIA PadLock ACE for AES algorithm.
> >>>
> >>> # lsmod | grep -i aes
> >>> padlock_aes 5633 0
> >>> aes_generic 25714 1 padlock_aes
> >>>
> >>>
> >>>
> >>> What am i doing wrong ?
> >>>
> >>>
> >>> ______________________________________________________________________
> >>> OpenSSL Project http://www.openssl.org
> >>> User Support Mailing List [hidden email]
> >>> Automated List Manager [hidden email]
> >>                                          ______________________________________________________________________
> >> OpenSSL Project                                 http://www.openssl.org
> >> User Support Mailing List                    [hidden email]
> >> Automated List Manager                           [hidden email]
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [hidden email]
> Automated List Manager                           [hidden email]
>
>
>


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: Can not enable via padlock

Salatiel Filho
On Thu, May 31, 2012 at 12:37 PM, Michael S. Zick <[hidden email]> wrote:
> On Thu May 31 2012, Salatiel Filho wrote:
>> Any other ideas ?
>>
> Yes, wrong or incomplete Debian package installed.
I dont think thats the problem. I tried build the package from source
using dpkg-buildpackage and i noticed that though libssl packace shows
1.0.0 in its name , the libraries inside are the ones built from 1.0.1
source.

>
> Your strace shows 1.0.0 in the pathname of the libpadlock.so
> it is trying to open.
>
> Did your apt-get include a new libpadlock.so or perhaps that
> is now packaged separately by Debian.
Yes. It is inside of the libssl package.

> I.E: Perhaps you need to install an additional package for Via.
I also don't think so because it works just fine in debian 32 bits.
This problem is in amd64 version.


>
> Mike
>> []'s
>> Salatiel
>>
>>
>> On Wed, May 30, 2012 at 8:40 PM, Salatiel Filho
>> <[hidden email]> wrote:
>> > No. Just installed from debian unstable repository.
>> > apt-get -t unstable install openssl
>> >
>> > []'s
>> > Salatiel
>> >
>> >
>> > On Wed, May 30, 2012 at 8:33 PM, Peter Kurrasch <[hidden email]> wrote:
>> >>
>> >> Are you combining version 1.0.1 and 1.0.0 ?
>> >>
>> >> ----------------------------------------
>> >>> From: [hidden email]
>> >>> Subject: Can not enable via padlock
>> >>> Date: Wed, 30 May 2012 20:26:45 -0300
>> >>> To: [hidden email]
>> >>>
>> >>> I am trying to test via padlock using 'openssl speed -engine padlock', but it fails.
>> >>>
>> >>> # openssl version
>> >>> OpenSSL 1.0.1c 10 May 2012
>> >>>
>> >>> # openssl engine padlock
>> >>> 140291115067048:error:260B606D:engine routines:DYNAMIC_LOAD:init failed:eng_dyn.c:521:
>> >>> 140291115067048:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:417:id=padlock
>> >>>
>> >>> # strace openssl engine padlock 2>&1 | grep -i padlock.so
>> >>> open("/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so", O_RDONLY) = 3
>> >>>
>> >>> # ls -la /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so
>> >>> -rw-r--r-- 1 root root 6096 May 11 12:51 /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so
>> >>>
>> >>> # dmesg | grep -i aes
>> >>> [ 284.335338] padlock: Using VIA PadLock ACE for AES algorithm.
>> >>>
>> >>> # lsmod | grep -i aes
>> >>> padlock_aes 5633 0
>> >>> aes_generic 25714 1 padlock_aes
>> >>>
>> >>>
>> >>>
>> >>> What am i doing wrong ?
>> >>>
>> >>>
>> >>> ______________________________________________________________________
>> >>> OpenSSL Project http://www.openssl.org
>> >>> User Support Mailing List [hidden email]
>> >>> Automated List Manager [hidden email]
>> >>                                          ______________________________________________________________________
>> >> OpenSSL Project                                 http://www.openssl.org
>> >> User Support Mailing List                    [hidden email]
>> >> Automated List Manager                           [hidden email]
>> ______________________________________________________________________
>> OpenSSL Project                                 http://www.openssl.org
>> User Support Mailing List                    [hidden email]
>> Automated List Manager                           [hidden email]
>>
>>
>>
>
>
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [hidden email]
> Automated List Manager                           [hidden email]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: Can not enable via padlock

Richard F. Ostrow Jr.

On 2012-05-31 12:01, Salatiel Filho wrote:

On Thu, May 31, 2012 at 12:37 PM, Michael S. Zick <[hidden email]> wrote:
On Thu May 31 2012, Salatiel Filho wrote:
Any other ideas ?
Yes, wrong or incomplete Debian package installed.
I dont think thats the problem. I tried build the package from source
using dpkg-buildpackage and i noticed that though libssl packace shows
1.0.0 in its name , the libraries inside are the ones built from 1.0.1
source.
Your strace shows 1.0.0 in the pathname of the libpadlock.so it is trying to open. Did your apt-get include a new libpadlock.so or perhaps that is now packaged separately by Debian.
Yes. It is inside of the libssl package.
I.E: Perhaps you need to install an additional package for Via.
I also don't think so because it works just fine in debian 32 bits.
This problem is in amd64 version.

Well, there's your problem. As far as I can tell, OpenSSL does not (officially) support padlock on the AMD64 architecture. There is a patch that I have been using (on gentoo) that enables 64-bit architecture support for padlock. Look on bugzilla.redhat.com for bug # 617539, apply the patch, and try again.

I note that there are some comments claiming that upstream fixed the bug in 1.0.1 and 1.1.0, but I'm still running 1.0.0j with the mentioned patch.

Mike
[]'s Salatiel On Wed, May 30, 2012 at 8:40 PM, Salatiel Filho <[hidden email]> wrote:
No. Just installed from debian unstable repository. apt-get -t unstable install openssl []'s Salatiel On Wed, May 30, 2012 at 8:33 PM, Peter Kurrasch <[hidden email]> wrote:
Are you combining version 1.0.1 and 1.0.0 ? ----------------------------------------
From: [hidden email] Subject: Can not enable via padlock Date: Wed, 30 May 2012 20:26:45 -0300 To: [hidden email] I am trying to test via padlock using 'openssl speed -engine padlock', but it fails. # openssl version OpenSSL 1.0.1c 10 May 2012 # openssl engine padlock 140291115067048:error:260B606D:engine routines:DYNAMIC_LOAD:init failed:eng_dyn.c:521: 140291115067048:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:417:id=padlock # strace openssl engine padlock 2>&1 | grep -i padlock.so open("/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so", O_RDONLY) = 3 # ls -la /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so -rw-r--r-- 1 root root 6096 May 11 12:51 /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so # dmesg | grep -i aes [ 284.335338] padlock: Using VIA PadLock ACE for AES algorithm. # lsmod | grep -i aes padlock_aes 5633 0 aes_generic 25714 1 padlock_aes What am i doing wrong ? ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [hidden email] Automated List Manager [hidden email]
                                         ______________________________________________________________________ OpenSSL Project                                 http://www.openssl.org User Support Mailing List                    [hidden email] Automated List Manager                           [hidden email]
______________________________________________________________________ OpenSSL Project                                 http://www.openssl.org User Support Mailing List                    [hidden email] Automated List Manager                           [hidden email]
______________________________________________________________________ OpenSSL Project                                 http://www.openssl.org User Support Mailing List                    [hidden email] Automated List Manager                           [hidden email]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]