Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 336902 - dev-libs/openssl: add support for AES-NI feature in new Intel iCore (Nehalem/Westmere)
Summary: dev-libs/openssl: add support for AES-NI feature in new Intel iCore (Nehalem/...
Status: RESOLVED LATER
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Library (show other bugs)
Hardware: All Linux
: High major (vote)
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-09-12 10:13 UTC by Martin Samek
Modified: 2010-09-14 07:23 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Martin Samek 2010-09-12 10:13:14 UTC
There is a new AES-NI feature in Intel iCore (Nehalem/Westmere) CPUs which needs patch in openssl lib. Unpatched version may cause crashes of some application (for example VMWare Workstation and Player when using system libs instead of bundled).

More can be found here:
http://rt.openssl.org/Ticket/Display.html?id=2067
http://rt.openssl.org/Ticket/Display.html?id=2065


Reproducible: Always

Steps to Reproduce:
1. Heve a iCore Nehalem/Westmere CPU
2. Launch VMWare Workstation
3. Start VM -> crash

Actual Results:  
VM crashes, because openssl lib in Portage missing support for AES-NI feature.

Expected Results:  
Openssl with support for AES-NI feature.
Comment 1 SpanKY gentoo-dev 2010-09-13 23:56:43 UTC
i dont see how not using new hardware features of a processor can cause a problem.  you'll need to better describe what's going on.

we dont generally add new features to openssl without it being upstream first.  once upstream cvs contains the changes, highlight the exact revs and we can look at including them.
Comment 2 Martin Samek 2010-09-14 07:17:02 UTC
I don't have further informations. I'll try to dig some. Currently stable openssl is ok on Core 2 Quad, but crashes on Core i5 CPU, tested many times.
Comment 3 Martin Samek 2010-09-14 07:23:08 UTC
Some minimal reading about AES-NI is here:
http://software.intel.com/file/26724/