Re: [squid-users] SSL patch and recent patches for openssl

From: Frank Neumann <frank.neumann@dont-contact.us>
Date: Fri, 04 Apr 2003 09:11:23 +0200

Hi,

Henrik Nordstrom wrote:

> Frank Neumann wrote:
> >
> > Hi folks,
> >
> > iirc the engine version of openssl is necessary to use the SSL patch for
> > squid2.5 for reverse SSL proxying. Am I right?
>
> Either the normal or the engine version of OpenSSL should work..
>
> IIRC the two is merged in the OpenSSL 0.9.7 release, and there no longer
> is a separate "engine" version.
>
> The main difference of the "engine" version of OpenSSL is that it
> supports crypto acceleration hardware, whereas the "standard" version
> only supports software crypto.

you're right. From the README.ENGINE of openssl-0.9.7a:

"In development for 0.9.7, the ENGINE code has been merged into the main
branch and will be present in the standard releases from 0.9.7 forwards."

In versions of openssl prior to 0.9.7 for instance the engine.h header file,
which is required by the squid SSL patch, wasn't available in the standard
version of openssl. That's what confused me.

Thanks.

Frank
Received on Fri Apr 04 2003 - 00:13:52 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:14:40 MST