OpenSSL error: cannot load engine 'aesni'

shakisha

I have got this error when setting in the server.conf the line

engine aesni

however the openssl command
--
openssl speed -evp aes-256-cbc
---

runs fine and

---
grep aes /proc/cpuinfo
---

returns aes support. What can i do for fixing this error? Compiling from sources didn't helped me.

Pippin

shakisha wroteI have got this error when setting in the server.conf the line
engine aesni

grep aes /proc/cpuinfo
returns aes support. What can i do for fixing this error?

Seems you cannot use it, ask Digital Ocean.

however the openssl command
openssl speed -evp aes-256-cbc
runs fine

Is wrong command

Try this:

openssl speed -evp aes-256-cbc -engine easni

shakisha

grep aes /proc/cpuinfo
returns aes support. What can i do for fixing this error?

Seems you cannot use it, ask Digital Ocean.

I've asked it, and they told me that yes, they support it.

Try this:

openssl speed -evp aes-256-cbc -engine easni

it returns:
openssl speed -evp aes-256-cbc -engine easni
invalid engine "easni"

Pippin

Hehe sorry, made a typo...
Try this:

openssl speed -evp aes-256-cbc -engine aesni

ruxandy

All the answers are wrong.
The OP is most lilely on OpenSSL 1.0.1 which does not have an AES-NI engine.
In OpenSSL 1.0.1, AES-NI support is integrated at EVP layer. More info here:
http://stackoverflow.com/questions/28939825/how-to-config-openssl-engine-aes-ni-in-nginx

Bottom line, you don't need to enable AES-NI in your OpenVPN config file. It will be used by default.