Code: Select all
# An OpenSSL vulnerability has recently been fixed with USN-6188-1 & 6119-1:
# CVE-2023-2650: possible DoS translating ASN.1 object identifiers.
# Ensure you have updated the package to its latest version.Just rename that file to a .bak file, and create a zero length file of the same name:
Code: Select all
sudo mv /etc/apt/apt.conf.d/20apt-esm-hook.conf /etc/apt/apt.conf.d/20apt-esm-hook.conf.bak
sudo touch /etc/apt/apt.conf.d/20apt-esm-hook.confupdate your Ubuntu Pro...
and make sure that your daily marketing activity safe and secured...
Code: Select all
sudo pro fix CVE-2017-9233
sudo pro fix CVE-2020-25686
sudo pro fix CVE-2021-44731
sudo pro fix CVE-2022-0778
sudo pro fix CVE-2023-2650
sudo pro fix USN-5079-2
sudo pro fix USN-6119-1
sudo pro fix USN-6188-1
sudo pro fix USN-6219-1
Code: Select all
openssl version -aThe Ubuntu LTS enablement, or Hardware Enablement (HWE), stack provides the newer kernel and X support for existing Ubuntu LTS releases. That stack can be enabled manually, but may also be pre-enabled with an Ubuntu LTS release.
The HWE stack can be used by desktop and server systems, as well as cloud or virtual images.
Ubuntu 20.04 LTS — Focal Fossa Desktop:
Code: Select all
sudo apt-get install --install-recommends linux-generic-hwe-20.04Code: Select all
hwe-support-status --verboseOne of the problems with Linux today on laptops is that the CPU will run in an unoptimized manner which will negatively reflect on battery life.
For example, the CPU will run using "performance" governor with turbo boost enabled regardless if it's plugged in to power or not.
These issues can be mitigated by using tools like indicator-cpufreq or cpufreq, but these still require manual action from your side which can be daunting and cumbersome.
Using tools like TLP can help in this situation with extending battery life (which is something I used to do for numerous years),
but it also might come with its own set of problems, like losing turbo boost.
My current TLP comfiguration:
(Adopted from : https://gist.github.com/pauloromeira/78 ... ed7eafa42a)
Copy My TLP config file (/etc/default/tlp) for ThinkPad:
(Just do edit/modified to work with your device)
Code: Select all
sudo nano /etc/default/tlpCode: Select all
# ------------------------------------------------------------------------------
# tlp - Parameters for power saving
# See full explanation: http://linrunner.de/en/tlp/docs/tlp-configuration.html
# dir: /etc/default/tlp
# Hint: some features are disabled by default, remove the leading # to enable
# them.
# Set to 0 to disable, 1 to enable TLP.
TLP_ENABLE=1
# Operation mode when no power supply can be detected: AC, BAT
# Concerns some desktop and embedded hardware only.
TLP_DEFAULT_MODE=AC
# Operation mode select: 0=depend on power source, 1=always use TLP_DEFAULT_MODE
# Hint: use in conjunction with TLP_DEFAULT_MODE=BAT for BAT settings on AC
TLP_PERSISTENT_DEFAULT=0
# Seconds laptop mode has to wait after the disk goes idle before doing a sync.
# Non-zero value enables, zero disables laptop mode.
DISK_IDLE_SECS_ON_AC=0
DISK_IDLE_SECS_ON_BAT=2
# Dirty page values (timeouts in secs).
MAX_LOST_WORK_SECS_ON_AC=15
MAX_LOST_WORK_SECS_ON_BAT=60
# Hint: CPU parameters below are disabled by default, remove the leading #
# to enable them, otherwise kernel default values are used.
# Select a CPU frequency scaling governor.
# Intel Core i processor with intel_pstate driver:
# powersave(*), performance
# Older hardware with acpi-cpufreq driver:
# ondemand(*), powersave, performance, conservative, schedutil
# (*) is recommended.
# Hint: use tlp-stat -p to show the active driver and available governors.
# Important:
# You *must* disable your distribution's governor settings or conflicts will
# occur. ondemand is sufficient for *almost all* workloads, you should know
# what you're doing!
#CPU_SCALING_GOVERNOR_ON_AC=powersave
#CPU_SCALING_GOVERNOR_ON_BAT=powersave
# Set the min/max frequency available for the scaling governor.
# Possible values strongly depend on your CPU. For available frequencies see
# the output of tlp-stat -p.
#CPU_SCALING_MIN_FREQ_ON_AC=0
#CPU_SCALING_MAX_FREQ_ON_AC=0
#CPU_SCALING_MIN_FREQ_ON_BAT=0
#CPU_SCALING_MAX_FREQ_ON_BAT=0
# Set energy performance hints (HWP) for Intel P-state governor:
# default, performance, balance_performance, balance_power, power
# Values are given in order of increasing power saving.
# Note: Intel Skylake or newer CPU and Kernel >= 4.10 required.
CPU_HWP_ON_AC=balance_performance
CPU_HWP_ON_BAT=balance_power
# Set Intel P-state performance: 0..100 (%)
# Limit the max/min P-state to control the power dissipation of the CPU.
# Values are stated as a percentage of the available performance.
# Requires an Intel Core i processor with intel_pstate driver.
#CPU_MIN_PERF_ON_AC=0
#CPU_MAX_PERF_ON_AC=100
#CPU_MIN_PERF_ON_BAT=0
#CPU_MAX_PERF_ON_BAT=30
# Set the CPU "turbo boost" feature: 0=disable, 1=allow
# Requires an Intel Core i processor.
# Important:
# - This may conflict with your distribution's governor settings
# - A value of 1 does *not* activate boosting, it just allows it
#CPU_BOOST_ON_AC=1
#CPU_BOOST_ON_BAT=0
# Minimize number of used CPU cores/hyper-threads under light load conditions
SCHED_POWERSAVE_ON_AC=0
SCHED_POWERSAVE_ON_BAT=1
# Kernel NMI Watchdog:
# 0=disable (default, saves power), 1=enable (for kernel debugging only)
NMI_WATCHDOG=0
# Change CPU voltages aka "undervolting" - Kernel with PHC patch required
# Frequency voltage pairs are written to:
# /sys/devices/system/cpu/cpu0/cpufreq/phc_controls
# CAUTION: only use this, if you thoroughly understand what you are doing!
#PHC_CONTROLS="F:V F:V F:V F:V"
# Set CPU performance versus energy savings policy:
# performance, normal, powersave
# Requires kernel module msr and x86_energy_perf_policy from linux-tools
ENERGY_PERF_POLICY_ON_AC=performance
ENERGY_PERF_POLICY_ON_BAT=powersave
# Hard disk devices; separate multiple devices with spaces (default: sda).
# Devices can be specified by disk ID also (lookup with: tlp diskid).
DISK_DEVICES="sda sdb"
# Hard disk advanced power management level: 1..254, 255 (max saving, min, off)
# Levels 1..127 may spin down the disk; 255 allowable on most drives.
# Separate values for multiple disks with spaces. Use the special value 'keep'
# to keep the hardware default for the particular disk.
DISK_APM_LEVEL_ON_AC="254 254"
DISK_APM_LEVEL_ON_BAT="128 128"
# Hard disk spin down timeout:
# 0: spin down disabled
# 1..240: timeouts from 5s to 20min (in units of 5s)
# 241..251: timeouts from 30min to 5.5 hours (in units of 30min)
# See 'man hdparm' for details.
# Separate values for multiple disks with spaces. Use the special value 'keep'
# to keep the hardware default for the particular disk.
#DISK_SPINDOWN_TIMEOUT_ON_AC="0 0"
#DISK_SPINDOWN_TIMEOUT_ON_BAT="0 0"
# Select IO scheduler for the disk devices: cfq, deadline, noop (Default: cfq);
# Separate values for multiple disks with spaces. Use the special value 'keep'
# to keep the kernel default scheduler for the particular disk.
#DISK_IOSCHED="cfq cfq"
# SATA aggressive link power management (ALPM):
# min_power, medium_power, max_performance
SATA_LINKPWR_ON_AC=max_performance
SATA_LINKPWR_ON_BAT=min_power
# Exclude SATA host devices from link power management.
# Separate multiple hosts with spaces.
#SATA_LINKPWR_BLACKLIST="host1"
# Runtime Power Management for AHCI controllers and disks:
# on=disable, auto=enable
# EXPERIMENTAL ** WARNING: auto will most likely cause system lockups/data loss
#AHCI_RUNTIME_PM_ON_AC=on
#AHCI_RUNTIME_PM_ON_BAT=on
# Seconds of inactivity before disk is suspended
AHCI_RUNTIME_PM_TIMEOUT=15
# PCI Express Active State Power Management (PCIe ASPM):
# default, performance, powersave
PCIE_ASPM_ON_AC=performance
PCIE_ASPM_ON_BAT=powersave
# Radeon graphics clock speed (profile method): low, mid, high, auto, default;
# auto = mid on BAT, high on AC; default = use hardware defaults.
# (Kernel >= 2.6.35 only, open-source radeon driver explicitly)
RADEON_POWER_PROFILE_ON_AC=high
RADEON_POWER_PROFILE_ON_BAT=low
# Radeon dynamic power management method (DPM): battery, performance
# (Kernel >= 3.11 only, requires boot option radeon.dpm=1)
RADEON_DPM_STATE_ON_AC=performance
RADEON_DPM_STATE_ON_BAT=battery
# Radeon DPM performance level: auto, low, high; auto is recommended.
RADEON_DPM_PERF_LEVEL_ON_AC=auto
RADEON_DPM_PERF_LEVEL_ON_BAT=auto
# WiFi power saving mode: on=enable, off=disable; not supported by all adapters.
WIFI_PWR_ON_AC=off
WIFI_PWR_ON_BAT=on
# Disable wake on LAN: Y/N
WOL_DISABLE=Y
# Enable audio power saving for Intel HDA, AC97 devices (timeout in secs).
# A value of 0 disables, >=1 enables power saving.
SOUND_POWER_SAVE_ON_AC=0
SOUND_POWER_SAVE_ON_BAT=1
# Disable controller too (HDA only): Y/N
SOUND_POWER_SAVE_CONTROLLER=Y
# Power off optical drive in UltraBay/MediaBay: 0=disable, 1=enable.
# Drive can be powered on again by releasing (and reinserting) the eject lever
# or by pressing the disc eject button on newer models.
# Note: an UltraBay/MediaBay hard disk is never powered off.
BAY_POWEROFF_ON_AC=0
BAY_POWEROFF_ON_BAT=0
# Optical drive device to power off (default sr0).
BAY_DEVICE="sr0"
# Runtime Power Management for PCI(e) bus devices: on=disable, auto=enable
RUNTIME_PM_ON_AC=on
RUNTIME_PM_ON_BAT=auto
# Exclude PCI(e) device adresses the following list from Runtime PM
# (separate with spaces). Use lspci to get the adresses (1st column).
#RUNTIME_PM_BLACKLIST="bb:dd.f 11:22.3 44:55.6"
# Exclude PCI(e) devices assigned to the listed drivers from Runtime PM.
# Default when unconfigured is "amdgpu nouveau nvidia radeon" which
# prevents accidential power-on of dGPU in hybrid graphics setups.
# Use "" to disable the feature completely.
# Separate multiple drivers with spaces.
#RUNTIME_PM_DRIVER_BLACKLIST="amdgpu nouveau nvidia radeon"
# Set to 0 to disable, 1 to enable USB autosuspend feature.
USB_AUTOSUSPEND=1
# Exclude listed devices from USB autosuspend (separate with spaces).
# Use lsusb to get the ids.
# Note: input devices (usbhid) are excluded automatically
#USB_BLACKLIST="1111:2222 3333:4444"
# Bluetooth devices are excluded from USB autosuspend:
# 0=do not exclude, 1=exclude
USB_BLACKLIST_BTUSB=0
# Phone devices are excluded from USB autosuspend:
# 0=do not exclude, 1=exclude (enable charging)
USB_BLACKLIST_PHONE=0
# WWAN devices are excluded from USB autosuspend:
# 0=do not exclude, 1=exclude
USB_BLACKLIST_WWAN=1
# Include listed devices into USB autosuspend even if already excluded
# by the blacklists above (separate with spaces).
# Use lsusb to get the ids.
#USB_WHITELIST="1111:2222 3333:4444"
# Set to 1 to disable autosuspend before shutdown, 0 to do nothing
# (workaround for USB devices that cause shutdown problems).
#USB_AUTOSUSPEND_DISABLE_ON_SHUTDOWN=1
# Restore radio device state (Bluetooth, WiFi, WWAN) from previous shutdown
# on system startup: 0=disable, 1=enable.
# Hint: the parameters DEVICES_TO_DISABLE/ENABLE_ON_STARTUP/SHUTDOWN below
# are ignored when this is enabled!
RESTORE_DEVICE_STATE_ON_STARTUP=0
# Radio devices to disable on startup: bluetooth, wifi, wwan.
# Separate multiple devices with spaces.
#DEVICES_TO_DISABLE_ON_STARTUP="bluetooth wifi wwan"
# Radio devices to enable on startup: bluetooth, wifi, wwan.
# Separate multiple devices with spaces.
#DEVICES_TO_ENABLE_ON_STARTUP="wifi"
# Radio devices to disable on shutdown: bluetooth, wifi, wwan
# (workaround for devices that are blocking shutdown).
#DEVICES_TO_DISABLE_ON_SHUTDOWN="bluetooth wifi wwan"
# Radio devices to enable on shutdown: bluetooth, wifi, wwan
# (to prevent other operating systems from missing radios).
#DEVICES_TO_ENABLE_ON_SHUTDOWN="wwan"
# Radio devices to enable on AC: bluetooth, wifi, wwan
#DEVICES_TO_ENABLE_ON_AC="bluetooth wifi wwan"
# Radio devices to disable on battery: bluetooth, wifi, wwan
#DEVICES_TO_DISABLE_ON_BAT="bluetooth wifi wwan"
# Radio devices to disable on battery when not in use (not connected):
# bluetooth, wifi, wwan
#DEVICES_TO_DISABLE_ON_BAT_NOT_IN_USE="bluetooth wifi wwan"
# Battery charge thresholds (ThinkPad only, tp-smapi or acpi-call kernel module
# required). Charging starts when the remaining capacity falls below the
# START_CHARGE_THRESH value and stops when exceeding the STOP_CHARGE_THRESH value.
# Main / Internal battery (values in %)
START_CHARGE_THRESH_BAT0=75
STOP_CHARGE_THRESH_BAT0=85
# Ultrabay / Slice / Replaceable battery (values in %)
#START_CHARGE_THRESH_BAT1=75
#STOP_CHARGE_THRESH_BAT1=80
# Restore charge thresholds when AC is unplugged: 0=disable, 1=enable
#RESTORE_THRESHOLDS_ON_BAT=1
# ------------------------------------------------------------------------------
# tlp-rdw - Parameters for the radio device wizard
# Possible devices: bluetooth, wifi, wwan
# Hints:
# - Parameters are disabled by default, remove the leading # to enable them.
# - Separate multiple radio devices with spaces.
# Radio devices to disable on connect.
DEVICES_TO_DISABLE_ON_LAN_CONNECT="wifi wwan"
DEVICES_TO_DISABLE_ON_WIFI_CONNECT="wwan"
DEVICES_TO_DISABLE_ON_WWAN_CONNECT="wifi"
# Radio devices to enable on disconnect.
DEVICES_TO_ENABLE_ON_LAN_DISCONNECT="wifi wwan"
DEVICES_TO_ENABLE_ON_WIFI_DISCONNECT=""
DEVICES_TO_ENABLE_ON_WWAN_DISCONNECT=""
# Radio devices to enable/disable when docked.
#DEVICES_TO_ENABLE_ON_DOCK=""
#DEVICES_TO_DISABLE_ON_DOCK=""
# Radio devices to enable/disable when undocked.
#DEVICES_TO_ENABLE_ON_UNDOCK="wifi"
#DEVICES_TO_DISABLE_ON_UNDOCK=""
Code: Select all
sudo apt install tp-smapi-dkms acpi-call-dkmsKeep In Mind...
If your kernel updated by the system, you need to re-install the tp-smapi-dkms and acpi-call-dkms to updating your kernel version .
On Ubuntu 20.04.4 the acpi-call-dkms package in the official repositories is incompatible with the provided kernels 5.13 or 5.15 and may cause TLP battery care malfunction, BIOS malfunction, system freezes, /dev/sda--> I/O error, Ext4 can't be read or reboots unexpetedly.
Solution: use acpi-call-dkms version 1.2.2 from the TLP PPA or Download from this link and install manually.
Code: Select all
sudo apt install --reinstall tp-smapi-dkms
sudo apt install --reinstall acpi-call-dkms //acpi-call-dkms version 1.2.2Since I'm using The Ubuntu LTS enablement, or Hardware Enablement (HWE), and initramfs using initrd image from
/boot/microcode.cpio and /boot/initrd.img-5.15.0-78-generic
and not using intel_pstate from Intel but using acpi-cpufreq to power CPU scaling driver, I need to edit my grub within:
Code: Select all
sudo nano /etc/default/grubCode: Select all
GRUB_CMDLINE_LINUX_DEFAULT="quiet splash intel_pstate=disable acpi-cpufreq=enable"Code: Select all
sudo apt install linux-tools-generic; sudo apt install linux-cloud-tools-generic
echo FRAMEBUFFER=y | sudo tee /etc/initramfs-tools/conf.d/splash && sudo update-initramfs -u && sudo update-grub
reboot> auto-cpufreq for power scaling driver,
> Install gnome shell extention: Sensory Perception to Shows CPU temperature, disk temperature, video card temperature, voltage and fan RPM.
> Install gnome shell extention: MSI Fan Control to start cooler booster on demand.
auto-cpufreq is available on the snap store, or can be installed using CLI:
Please note:
Make sure snapd is installed and snap version is >= 2.44
for auto-cpufreq to fully work due to recent snapd changes.
Code: Select all
sudo snap install auto-cpufreqif you install TLPUI using Ubuntu PPA with prebuild packages (third party):
Code: Select all
sudo add-apt-repository -y ppa:linuxuprising/apps
sudo apt update
sudo apt install tlpuisource: https://github.com/d4nj1/TLPUI/wiki/Ins ... ian-family
Code: Select all
git clone https://github.com/d4nj1/TLPUI
cd TLPUI
python3 setup.py --command-packages=stdeb.command bdist_deb
sudo dpkg -i deb_dist/python3-tlpui_*all.debOr CLI :
Code: Select all
sudo nano /etc/tlp.confMake sure to Check auto-cpufreq is running and active:
Code: Select all
systemctl status snap.auto-cpufreq.service.serviceSource : Configuration --> /etc/tlp.conf --> Processor (Different with Ubuntu TLP default source: --> /etc/default/tlp)
thickmark CPU_SCALLING_GOVERNOR_ON_AC --> performance
thickmark CPU_SCALLING_GOVERNOR_ON_BAT --> powersave
thickmark CPU_BOOST_ON_AC --> OFF
thickmark CPU_BOOST_ON_BAT --> OFF
thickmark CPU_HWP_DYN_ON_AC --> OFF
thickmark CPU_HWP_DYN_ON_BAT --> OFF
and click save button on the top right corner or click the reload button to reset to the defalult setting TLPUI configuration.
You might also set the other option to work with your device, such like CPU_SCALLING_FREQ option.
NEW & UPDATED!
Related to auto-cpufreq, Ubuntu kernel lifecycle and enablement stack (HWE) and acpi-call-dkms
Lately... Since I've got a lot of problem using snap and gnome related to auto-cpufreq,
ea: TLP battery care malfunction, BIOS malfunction, system freezes, /dev/sda--> I/O error, Ext4 can't be read or reboots unexpetedly...
I've decided to use auto-cpufreq-installer from:
https://github.com/AdnanHodzic/auto-cpufreq
Remove auto-cpufreq installed from snap package:
Code: Select all
sudo snap remove auto-cpufreqthen install auto-cpufreq-installer and follow on screen instructions::
Code: Select all
git clone https://github.com/AdnanHodzic/auto-cpufreq.git
cd auto-cpufreq && sudo ./auto-cpufreq-installer
sudo auto-cpufreq --installStill using auto cpu scalling to keep them running smoothly and not overclocking/throttling it using turbo mode,
Normal CPU Temp is range average 40 °C - 70 °C or 104.0 °F - 158.0 °F,
to avoid unpredictable CPU damage (Many factors can be involved... such like ea: too many tabs opened in your browsers at the same time) and to reduce/minimalize cpu temp overhaeating while the cpu usage is low.
Code: Select all
sudo nano /etc/auto-cpufreq.confCode: Select all
# settings for when connected to a power source
[charger]
# see available governors by running: cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_available_governors
# preferred governor.
governor = powersave
# minimum cpu frequency (in kHz)
# example: for 800 MHz = 800000 kHz --> scaling_min_freq = 800000
# see conversion info: https://www.rapidtables.com/convert/frequency/mhz-to-hz.html
# to use this feature, uncomment the following line and set the value accordingly
# scaling_min_freq = 800000
# maximum cpu frequency (in kHz)
# example: for 1GHz = 1000 MHz = 1000000 kHz -> scaling_max_freq = 1000000
# see conversion info: https://www.rapidtables.com/convert/frequency/mhz-to-hz.html
# to use this feature, uncomment the following line and set the value accordingly
# scaling_max_freq = 1000000
# turbo boost setting. possible values: always, auto, never
turbo = auto
# settings for when using battery power
[battery]
# see available governors by running: cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_available_governors
# preferred governor
governor = powersave
# minimum cpu frequency (in kHz)
# example: for 800 MHz = 800000 kHz --> scaling_min_freq = 800000
# see conversion info: https://www.rapidtables.com/convert/frequency/mhz-to-hz.html
# to use this feature, uncomment the following line and set the value accordingly
# scaling_min_freq = 800000
# maximum cpu frequency (in kHz)
# see conversion info: https://www.rapidtables.com/convert/frequency/mhz-to-hz.html
# example: for 1GHz = 1000 MHz = 1000000 kHz -> scaling_max_freq = 1000000
# to use this feature, uncomment the following line and set the value accordingly
# scaling_max_freq = 1000000
# turbo boost setting. possible values: always, auto, never
turbo = autoCode: Select all
sudo apt install --reinstall tp-smapi-dkms &&
sudo apt install --reinstall acpi-call-dkmsTo make sure that auto-cpufreq-installer running well, I've to check it with:
Code: Select all
auto-cpufreq --stats //to check auto-cpufreq modes and options run with /etc/auto-cpufreq.conf config file automatically
systemctl status auto-cpufreq //to check the daemon has been installed, Active and Running
If you are experiencing boot issues...
My recommendation:
Install and run boot-repair
Code: Select all
sudo add-apt-repository -y ppa:yannubuntu/boot-repair; sudo apt update; sudo apt install -y boot-info; boot-infoInstall OpenSSL (ONLY If you need it)
If you're using Ubuntu 20.04 LTS Desktop ...
Do This:
You need to be a root:
Code: Select all
sudo -iCode: Select all
sudo apt-get update && sudo apt-get upgrade
sudo apt install build-essential checkinstall zlib1g-dev -yCode: Select all
cd /usr/local/src/
wget https://www.openssl.org/source/openssl-1.1.1k.tar.gz
tar -xf openssl-1.1.1k.tar.gz
cd openssl-1.1.1kCode: Select all
./config --prefix=/usr/local/ssl --openssldir=/usr/local/ssl shared zlib
make
make testCode: Select all
make installConfigure the shared libraries for OpenSSL.
The new OpenSSL binary will load library files from the '/usr/local/ssl/lib' directory.
Code: Select all
cd /etc/ld.so.conf.d/
sudo nano openssl-1.1.1k.confCode: Select all
/usr/local/ssl/libCode: Select all
sudo ldconfig -vReplace the default openssl binary which is in '/usr/bin/openssl or /bin/openssl' with the new version in '/usr/local/ssl/bin/openssl'.
Backup the binary files
Code: Select all
mv /usr/bin/c_rehash /usr/bin/c_rehash.BEKUP
mv /usr/bin/openssl /usr/bin/openssl.BEKUPCode: Select all
sudo nano /etc/environmentCode: Select all
:/usr/local/ssl/binsource /etc/environment
Code: Select all
echo $PATHCode: Select all
openssl version -a
OpenSSL 1.1.1k 25 Mar 2021
built on: Tue Aug 1 16:03:47 2023 UTC
platform: linux-x86_64
options: bn(64,64) rc4(16x,int) des(int) idea(int) blowfish(ptr)
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAESNI_ASM -DVPAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM -DZLIB -DNDEBUG
OPENSSLDIR: "/usr/local/ssl"
ENGINESDIR: "/usr/local/ssl/lib/engines-1.1"
Seeding source: os-specific