Red Hat Bugzilla – Bug 50645
RFE -- Add SSLCryptoDevice option
Last modified: 2015-03-04 20:09:25 EST
Description of Enhancement:
For support of the Broadcom 5280 SSL offload card, there should be an
option in Apacheconf to set the SSL Engine used by OpenSSL to enable use
of the card.
-- Email from Nalin Dahyabhai:
The documentation for the OpenSSL engine code states that no hardware
engines are used unless specifically requested by the calling
To do so with mod_ssl, add "SSLCryptoDevice ubsec" on a line within the
<IfDefine HAVE_SSL> section of httpd.conf, outside of any virtual host
declarations (in beta 3, this would be around line 1200 in the default
Per Mark Cox, this will be taken care of by adding a default crypto engine
setting to OpenSSL, so no changes need to happen to apacheconf at this time.