[OpenIndiana-discuss] Illumos KMF

[Jim Klimov]

26 сентября 2014 г. 16:53:43 CEST, Alexander Pyhalov <alp at rsu.ru> пишет:
>On 09/26/2014 18:39, Nikola M. wrote:
>> On 09/26/14 10:02 AM, Alexander Pyhalov wrote:
>>> Hello.
>
>Hello.
>
>>
>> Are you actually sure you know what you need to be tested?
>>
>
>No, this is why I'm asking.
>I'd like to update mozilla-nss and nspr and like to see what can be 
>affected.
>
>And, honestly, if the question is "should we deliver out of date and 
>vulnerable nss/nspr or break something which nobody uses", I'd prefer 
>the later.
>
>In this case I don't think that it will be broken, mozilla nss/nspr 
>libraries have good compatibility. Besides this, OmniOS has already 
>updated them. But I just like to test it somehow.

>From my side of the peanut gallery, I mostly know these libraries and tools in the context of various Sun Java Enterprise stack of software (much of it native, with Java just a flashy part of the name). I gather ikkumis distros are still good hosts for both freely licensed old Sun releases as well as Oracle-branded releases where the lawnmower chose to keep and maintain the software. And the ability to support the target software stacks of the Solaris legacy is indeed a selling point for many cases. The world is not only opensource. And Sun legacy is not only closed-source either ;)

Regarding the (SPARC) HW-assisted crypto in this case - Niagara systems' perfect niche initially (when these CPUs were relatively weak in other areas) was with Sun Web Servers maintaining multiple (possibly SSL) connections as gateways/filters/balancers/aggregators of internally hosted web services. Or as LDAPS (DSEE DPS) proxies. Or SMTPS proxies... And that HTTPS/LDAPS/... was hardware-accelerated for good measure, and IIRC that was well before Intel encryption extensions hit the wide market.

Which reminds me: does illumos have X86 crypto acceleration support as well?

HTH,
Jim
--
Typos courtesy of K-9 Mail on my Samsung Android