Bug 336902

Summary:	dev-libs/openssl: add support for AES-NI feature in new Intel iCore (Nehalem/Westmere)
Product:	Gentoo Linux	Reporter:	Martin Samek <mr>
Component:	[OLD] Library	Assignee:	Gentoo's Team for Core System packages <base-system>
Status:	RESOLVED LATER
Severity:	major	CC:	m.debruijne
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Martin Samek 2010-09-12 10:13:14 UTC

There is a new AES-NI feature in Intel iCore (Nehalem/Westmere) CPUs which needs patch in openssl lib. Unpatched version may cause crashes of some application (for example VMWare Workstation and Player when using system libs instead of bundled).

More can be found here:
http://rt.openssl.org/Ticket/Display.html?id=2067
http://rt.openssl.org/Ticket/Display.html?id=2065


Reproducible: Always

Steps to Reproduce:
1. Heve a iCore Nehalem/Westmere CPU
2. Launch VMWare Workstation
3. Start VM -> crash

Actual Results:  
VM crashes, because openssl lib in Portage missing support for AES-NI feature.

Expected Results:  
Openssl with support for AES-NI feature.

Comment 1 SpanKY gentoo-dev

2010-09-13 23:56:43 UTC

i dont see how not using new hardware features of a processor can cause a problem.  you'll need to better describe what's going on.

we dont generally add new features to openssl without it being upstream first.  once upstream cvs contains the changes, highlight the exact revs and we can look at including them.

Comment 2 Martin Samek 2010-09-14 07:17:02 UTC

I don't have further informations. I'll try to dig some. Currently stable openssl is ok on Core 2 Quad, but crashes on Core i5 CPU, tested many times.

Comment 3 Martin Samek 2010-09-14 07:23:08 UTC

Some minimal reading about AES-NI is here:
http://software.intel.com/file/26724/