Operating System - HP-UX
1828817 Members
2471 Online
109985 Solutions
New Discussion

Apache, openssl and SSL Accelerator H/W

 
Denver Osborn
Honored Contributor

Apache, openssl and SSL Accelerator H/W

Help!! This problem is driving my insane. :)

I'm setting up some SSL Accelerator cards on one of our L2000's. Vendor is AEP and the documentation is poor/outdated. I can get openssl 0.9.7 to use the SSL Hardware, but can't figure out what to do with apache's config files.

Does anyone know what I have to do to apache or mod_ssl to let it know that there is a crypto device that it should be using?

Currently I've tested using "openssl speed rsa1024 -engine aep". Just need to figure out the apache portion now but not sure how to tell it to use an engine.

Thanks!
-denver
6 REPLIES 6
Steven E. Protter
Exalted Contributor

Re: Apache, openssl and SSL Accelerator H/W

Greetings to you Denver,

I was wondering if there was anything on http:www.openssl.org that might help.

That site seems kind of lame, but there are a few docs in this search that might help.

http://search.apache.org/index.cgi?query=ssl&submit=Search%21&metaname=swishdefault&sort=swishrank&sbm=www

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Denver Osborn
Honored Contributor

Re: Apache, openssl and SSL Accelerator H/W

Thanks Steven,

Nothing usefull yet. I've been all over the web looking, openssl.org and modssl.org didn't have an answer.

Denver Osborn
Honored Contributor

Re: Apache, openssl and SSL Accelerator H/W

solved our problem and posting info as it might help anyone else avoid the headache...

apache 2.0 httpd bin had to be recompiled using CPPFLAG="-DSSL_EXPERIMENTAL_ENGINE". Once this was done httpd recognized SSLCryptoDevice as a valid directive and was able to use the crypto hardware.

-denver
Shawn Wignall
New Member

Re: Apache, openssl and SSL Accelerator H/W

I'm still having a problem resolving a similar issue.

I don't want to clutter this area with my newbie questions, so could you drop some knowledge on my forum, denver?

wig
Denver Osborn
Honored Contributor

Re: Apache, openssl and SSL Accelerator H/W

Hey wig, what forum? Where?

-oz
Shawn Wignall
New Member

Re: Apache, openssl and SSL Accelerator H/W

WigBL.com

wig