<div dir="ltr">Hi Matt,<div><br></div><div>Thanks for the reply. We dont want to turn off the engine fully. We have TPM chip, that is part of OpenSSL. I just want to turn off default available hardware using</div><div><br></div><div><span style="color:rgb(80,0,80);font-size:12.8px">no-hw-4758-cca no-hw-</span><wbr style="color:rgb(80,0,80);font-size:12.8px"><span style="color:rgb(80,0,80);font-size:12.8px">aep no-hw-atalla no-hw-chil </span><wbr style="color:rgb(80,0,80);font-size:12.8px"><span style="color:rgb(80,0,80);font-size:12.8px">no-hw-cswift no-hw-ibmca no-</span><wbr style="color:rgb(80,0,80);font-size:12.8px"><span style="color:rgb(80,0,80);font-size:12.8px">hw-ncipher no-hw-nuron no-hw-</span><wbr style="color:rgb(80,0,80);font-size:12.8px"><span style="color:rgb(80,0,80);font-size:12.8px">padlock no-hw-sureware no-hw-</span><wbr style="color:rgb(80,0,80);font-size:12.8px"><span style="color:rgb(80,0,80);font-size:12.8px">ubsec no-hw-zencod.</span><br></div><div><br></div><div>However as of now using the above values with ./Configure is not turning off the compilation of the other hardware components.</div><div><span style="color:rgb(80,0,80);font-size:12.8px"><br></span></div><div><span style="color:rgb(80,0,80);font-size:12.8px">Regards</span></div><div><span style="color:rgb(80,0,80);font-size:12.8px">Jaya</span></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Nov 2, 2017 at 3:56 PM, Matt Caswell <span dir="ltr"><<a href="mailto:matt@openssl.org" target="_blank">matt@openssl.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=""><br>
<br>
On 02/11/17 07:07, Jayalakshmi bhat wrote:<br>
> Hi Matt,<br>
><br>
</span><span class="">> Thanks a lot for the response. Sorry for the delayed reply. I was out of<br>
> office for a while. This helped me. However I am not seeing option to<br>
> remove unwanted engine files to go away from compilation. OpenSSL 1.01x<br>
> method<br>
> (no-hw no-hw-4758-cca no-hw-<wbr>aep no-hw-atalla no-hw-chil <wbr>no-hw-cswift no-hw-ibmca no-<wbr>hw-ncipher no-hw-nuron no-hw-<wbr>padlock no-hw-sureware no-hw-<wbr>ubsec no-hw-zencod)<br>
> does not seems to work. Is there any way to do it?<br>
<br>
</span>Hmmm - that looks like a possible bug to me. I think that should work<br>
(Richard Levitte may be able to comment).<br>
<br>
You can also use no-engine which switches off engine support altogether<br>
<span class="HOEnZb"><font color="#888888"><br>
Matt<br>
</font></span><span class="im HOEnZb"><br>
><br>
><br>
> Regards<br>
> Jayalakshmi<br>
><br>
> On Thu, Oct 26, 2017 at 4:09 PM, Matt Caswell <<a href="mailto:matt@openssl.org">matt@openssl.org</a><br>
</span><span class="im HOEnZb">> <mailto:<a href="mailto:matt@openssl.org">matt@openssl.org</a>>> wrote:<br>
><br>
><br>
><br>
> On 25/10/17 18:02, Jayalakshmi bhat wrote:<br>
> > Hi Matt,<br>
> ><br>
> > Thanks a lot. This helps me. I had seen different options for OpenSSL<br>
> > 1.0.1e versions. Hence had some confusions.<br>
> > Does this means, options specified here only can be used for OpenSSL<br>
> > 1.0.2x releases.<br>
><br>
> The INSTALL file is specific to a release. Many options are applicable<br>
> to both 1.0.1 and 1.0.2 but there may be some differences. We did quite<br>
> a bit of work on the INSTALL file in the latest 1.1.0 release to make<br>
> sure all options were documented properly. That happened after the 1.0.2<br>
> release so it could be the case that there are some options that are<br>
> undocumented in 1.0.2.<br>
><br>
> Matt<br>
><br>
> ><br>
> > Regards<br>
> > Jayalakshmi<br>
> ><br>
> > On Tue, Oct 24, 2017 at 2:31 PM, Matt Caswell <<a href="mailto:matt@openssl.org">matt@openssl.org</a> <mailto:<a href="mailto:matt@openssl.org">matt@openssl.org</a>><br>
</span><div class="HOEnZb"><div class="h5">> > <mailto:<a href="mailto:matt@openssl.org">matt@openssl.org</a> <mailto:<a href="mailto:matt@openssl.org">matt@openssl.org</a>>>> wrote:<br>
> ><br>
> ><br>
> ><br>
> > On 24/10/17 07:06, Jayalakshmi bhat wrote:<br>
> > > Hi All,<br>
> > ><br>
> > > I am looking for details on options used to disable or remove unwanted<br>
> > > ciphers, components while openssl building. This is for OpenSSL 1.0.2h.<br>
> > > I am seeing many things on internet. But most of them have minimum<br>
> > > explanation, please can you tell me is there any link that I can refer.<br>
> ><br>
> > Have you looked in INSTALL?<br>
> ><br>
> > <a href="https://github.com/openssl/openssl/blob/OpenSSL_1_0_2-stable/INSTALL" rel="noreferrer" target="_blank">https://github.com/openssl/<wbr>openssl/blob/OpenSSL_1_0_2-<wbr>stable/INSTALL</a><br>
> <<a href="https://github.com/openssl/openssl/blob/OpenSSL_1_0_2-stable/INSTALL" rel="noreferrer" target="_blank">https://github.com/openssl/<wbr>openssl/blob/OpenSSL_1_0_2-<wbr>stable/INSTALL</a>><br>
> > <<a href="https://github.com/openssl/openssl/blob/OpenSSL_1_0_2-stable/INSTALL" rel="noreferrer" target="_blank">https://github.com/openssl/<wbr>openssl/blob/OpenSSL_1_0_2-<wbr>stable/INSTALL</a><br>
> <<a href="https://github.com/openssl/openssl/blob/OpenSSL_1_0_2-stable/INSTALL" rel="noreferrer" target="_blank">https://github.com/openssl/<wbr>openssl/blob/OpenSSL_1_0_2-<wbr>stable/INSTALL</a>>><br>
> ><br>
> > Matt<br>
> ><br>
> > --<br>
> > openssl-users mailing list<br>
> > To unsubscribe:<br>
> > <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/<wbr>mailman/listinfo/openssl-users</a><br>
> <<a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/<wbr>mailman/listinfo/openssl-users</a><wbr>><br>
> > <<a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/<wbr>mailman/listinfo/openssl-users</a><br>
> <<a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/<wbr>mailman/listinfo/openssl-users</a><wbr>>><br>
> ><br>
> ><br>
> ><br>
> ><br>
> --<br>
> openssl-users mailing list<br>
> To unsubscribe:<br>
> <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/<wbr>mailman/listinfo/openssl-users</a><br>
> <<a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/<wbr>mailman/listinfo/openssl-users</a><wbr>><br>
><br>
><br>
><br>
><br>
--<br>
openssl-users mailing list<br>
To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/<wbr>mailman/listinfo/openssl-users</a><br>
</div></div></blockquote></div><br></div>