crypto(9) choose another driver if we cannot open a session on it

Philip Paeps philip at freebsd.org
Mon Dec 8 12:21:58 PST 2008


On 2008-12-07 22:45:51 (+0100), Patrick Lamaizière <patfbsd at davenulle.org> wrote:
> I wrote a small patch to allow the crypto framework to choose another
> cryptographic driver if we cannot open a session on the driver.

Very cool. :-)  I've been hacking on this too, mainly to get rid of the code
duplication that currently exists.

> That should not break anything. It would be nice to test it on a box with a
> Geode LX CPU and a crypto device like a VPN1411 card.  I don't have the
> hardware but I've checked that we revert to the cryptosoft driver when using
> ipsec and glxsb with AES key's length != 128 bits.

I'll test that tonight.  I think I've got a hifn card hiding somewhere near a
soekris.

Thanks!

 - Philip

-- 
Philip Paeps                                    Please don't Cc me, I am
philip at freebsd.org                               subscribed to the list.

  "Maybe you should loosen her clothing or something."
          -- Gaspode the wonder dog
             (Terry Pratchett, Moving Pictures)


More information about the freebsd-hackers mailing list