Re: pkg/36517 (builtin.mk fails to detect the Solaris built in OpenSSL)

[Jörn Clausen <joernc%googlemail.com@localhost>]

Just for the record: On Sparc, the "native" version of OpenSSL
(/usr/sfw/bin/openssl) is significantly faster than the one compiled
from pkgsrc, at least with standard compiler options, and for most of
the algorithms:

OpenSSL 0.9.7d 17 Mar 2004 (+ security fixes for: CVE-2005-2969
CVE-2006-2937 CVE-2006-2940 CVE-2006-3738 CVE-2006-4339 CVE-2006-4343
CVE-2007-5135 CVE-2008-5077 CVE-2009-0590)
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
md5               5067.21k    17566.61k    49591.13k    91534.34k   121629.35k
hmac(md5)         8104.42k    25877.74k    64060.76k   102259.37k   123863.04k
sha1              5138.62k    17033.11k    42430.38k    72883.20k    92228.27k
rmd160            4348.91k    11437.06k    27559.81k    42526.04k    50662.06k
rc4              83807.53k   105162.26k   113817.77k   116205.57k   116176.21k

versus a not-so-old version from pkgsrc:

OpenSSL 0.9.8x 10 May 2012
built on: Thu Oct 18 15:51:58 CEST 2012
options:bn(64,32) md2(int) rc4(ptr,char) des(idx,cisc,16,long)
aes(partial) blowfish(ptr)
compiler: gcc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT
-DDSO_DLFCN -DHAVE_DLFCN_H -O -O3 -fomit-frame-pointer -Wall
-DB_ENDIAN -DBN_DIV2W
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
md5               7147.72k    22352.38k    53795.16k    82647.38k    97883.48k
hmac(md5)         7385.30k    22827.86k    54280.28k    82848.43k    97921.71k
sha1              3696.81k     8823.53k    16139.78k    20247.21k    21686.95k
rmd160            1400.98k     3082.84k     5371.90k     6588.07k     7080.62k
rc4              65909.05k    72306.30k    74684.16k    75298.13k    75412.82k

Especially sha1 is much faster with native OpenSSL. We had to switch
back from pkgsrc to native for our radius server, because it was not
able to provide the necessary performance.

Again, just for the record. No change requested.


On Thu, Feb 7, 2013 at 3:07 PM,  <jperkin%netbsd.org@localhost> wrote:
> Synopsis: builtin.mk fails to detect the Solaris built in OpenSSL
>
> State-Changed-From-To: open->closed
> State-Changed-By: jperkin%NetBSD.org@localhost
> State-Changed-When: Thu, 07 Feb 2013 14:07:25 +0000
> State-Changed-Why:
> It's likely that the OpenSSL in pkgsrc is now more suitable than that
> provided in the base system, but in any case this can be tweaked by
> setting PREFER_NATIVE appropriately.
>
>
>



-- 
Joern Clausen
http://thebloeg.blogspot.com/
http://www.oe-files.de/photography/