The mod_ssl included with Apache 2.0 has nothing to do with the one you may have been used to with 1.3. I build Apache 2.0 with any OpenSSL 0.9.7. The module mod_ssl is statically built into Apache, whereas libssl and libcrypto are shared objects. In order to use the cryptographic accelerator, I set LD_LIBRARY_PATH to point to the location where the manufacturer's OpenSSL libraries with support for the accelerator are located, before starting the server. That does the trick. Using a Sun tool to inspect kernel variables I can watch the accelerator counters increase with traffic. I have no idea how to direct vanilla OpenSSL to use a particular built-in HW support. Maybe it does use the HW accelerator whenever it detects it is installed ? I do not know what Sun has done to OpenSSL to add support for their cards, but maybe they have just added support for their cards in addition to the HW already supported by openssl.org ? -ascs -----Original Message----- From: Horthik [mailto:p_karthikeyan_be@xxxxxxxxxxx] Sent: Thursday, July 21, 2005 2:55 PM To: users@xxxxxxxxxxxxxxxx Subject: RE: [users@httpd] Apache 2.0.54 and SSLaccelerator card hi, I am also having any libraries(.so file in lib),I am using ubsec accelerator card ,I think openssl is already having support for this card by default, In apache it should come "SSLCryptoDevice builtin" in ssl.conf,so that we can modify "SSLCrypotoDevice ubsec" to enable accelerator card, I am not getting that one. can you please specify your, configuration and building steps for Appache 2.0 with sslaccelerator. Thanks for your reply -Karthikyan --- Axel-Stéphane SMORGRAV <Axel-Stephane.SMORGRAV@xxxxxxxxxxxxxx> wrote: > SSLCryptoDevice is not a mod_ssl directive in Apache 2.0. > > What I do is dynamically link mod_ssl with the adequate > libcryptography that supports my accelerator card. > > I run Apache on Solaris 8 with a Sun cryptographic accelerator and > OpenSSL libraries supplied by Sun. > > You should check whether the manufacturer of your cryptographic > accelerator also supplies an OpenSSL library. > > -ascs > > -----Original Message----- > From: Horthik [mailto:p_karthikeyan_be@xxxxxxxxxxx] > Sent: Thursday, July 21, 2005 7:38 AM > To: users@xxxxxxxxxxxxxxxx > Subject: [users@httpd] Apache 2.0.54 and SSLaccelerator card > > hi, > > please help me to find a solution, I am using apache > 2.0.54 and a sslaccelerator card, when i compile it with mod_ssl > support, there is no directive "SSLCryptoDevice" in ssl.conf. If i add > manually in ssl.conf it is saying > > "Invalid command 'SSLCryptoDevice', perhaps mis-spelled or defined > by a module not included in the server configuration" > > This is my compilation option of apache2.0.54 > > "./configure --prefix=/apache2 > -enable-mods-shared=most --enable-deflate --enable-ssl=shared > --with-ssl=/usr/local/ssl --enable-rule=SSL_EXPERIMENTAL > --with-mpm=perchild " > > Why I am not getting the SSLCryotoDevice directive in ssl.conf. > > Thanks in advance > > -Karthikeyan > > > > > > ____________________________________________________ > Start your day with Yahoo! - make it your home page > http://www.yahoo.com/r/hs > > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server > Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: > users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: > users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: > users-help@xxxxxxxxxxxxxxxx > > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server > Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: > users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: > users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: > users-help@xxxxxxxxxxxxxxxx > > ____________________________________________________ Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|