<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Daniel,<br>Thank you for the fast reply.<br>Can you clarify if I need to do something in openswan configuration files after I configure CentOS to load <span id="ecxsummary_alias_container"><span id="ecxshort_desc_nonedit_display">aesni_intel kernel module?<br>Best regards,<br> Michael<br></span></span><br><div><hr id="stopSpelling">Subject: Re: [Openswan Users] newbie question: How to configure openswan to use AES-NI acceleration on CentOS 6?<br>From: dan.cave@me.com<br>Date: Sun, 28 Feb 2016 14:04:27 +0000<br>CC: users@lists.openswan.org<br>To: michael_furman@hotmail.com<br><br><div>Hi<br><br>The aes module should be loaded at boot time using modules.conf as you can call it there , once the kernel has loaded it up you can use lsmod to check it's installed and why which point ipsec/openswan should have loaded afterwards. You might want to do some digging if you want to do something else but from what I'm familiar with centos/redhat my have updated the centos district so you probably want to do a yum update to refresh the repo for the bug fix if they have included it </div><div id="ecxAppleMailSignature"><img src="https://a.gfx.ms/emoji_1F61C.png" class="Emoji$1F61C$AE3 RenderedEmoji" title="Face with stuck-out tongue and winking eye" alt="Face with stuck-out tongue and winking eye"><img src="https://a.gfx.ms/emoji_1F44D.png" class="Emoji$1F44D$AE5 RenderedEmoji" title="Thumbs up sign" alt="Thumbs up sign"></div><div id="ecxAppleMailSignature"><br></div><div id="ecxAppleMailSignature">Sent from my iPhone</div><div><br>On 28 Feb 2016, at 13:38, Michael Furman <<a href="mailto:michael_furman@hotmail.com">michael_furman@hotmail.com</a>> wrote:<br><br></div><blockquote><div>
<style><!--
.ExternalClass .ecxhmmessage P {
padding:0px;
}
.ExternalClass body.ecxhmmessage {
font-size:12pt;
font-family:Calibri;
}
--></style>
<div dir="ltr">Hi all,<br>I have tried to search web and the openswan list but I can not find how to configure openswan to use AES-NI acceleration on CentOS 6.<br><br><br>I just found that RedHat has fixed bug that <span id="ecxsummary_alias_container"><span id="ecxshort_desc_nonedit_display">openswan does not load the aesni_intel kernel module:</span></span><br><a href="https://bugzilla.redhat.com/show_bug.cgi?id=957400" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=957400</a><br><br>Therefore after the fix <span id="ecxsummary_alias_container"><span id="ecxshort_desc_nonedit_display">openswan should load the aesni_intel kernel module on Redhat 6.5 (and therefore on CentOS .5).<br></span></span><br>How should I configure <span id="ecxsummary_alias_container"><span id="ecxshort_desc_nonedit_display">openswan </span></span>to <span id="ecxsummary_alias_container"><span id="ecxshort_desc_nonedit_display">load the aesni_intel kernel module?<br><br></span></span>Thank you in advance for your help and best regards,<br> Michael<br> </div>
</div></blockquote><blockquote><div><span>_______________________________________________</span><br><span><a href="mailto:Users@lists.openswan.org">Users@lists.openswan.org</a></span><br><span><a href="https://lists.openswan.org/mailman/listinfo/users" target="_blank">https://lists.openswan.org/mailman/listinfo/users</a></span><br><span>Micropayments: <a href="https://flattr.com/thing/38387/IPsec-for-Linux-made-easy" target="_blank">https://flattr.com/thing/38387/IPsec-for-Linux-made-easy</a></span><br><span>Building and Integrating Virtual Private Networks with Openswan:</span><br><span><a href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155" target="_blank">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a></span></div></blockquote></div> </div></body>
</html>