From ed48f326097d347f89ebc2cea948fed82ed73c9a Mon Sep 17 00:00:00 2001
From: Xi Ruoyao <xry111@xry111.site>
Date: Sun, 16 Apr 2023 18:42:55 +0800
Subject: openssl: Clarify the condition when 30-test_afalg.t fails

---
 chapter08/openssl.xml | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

(limited to 'chapter08')

diff --git a/chapter08/openssl.xml b/chapter08/openssl.xml
index 0c3c41a7c..40a769311 100644
--- a/chapter08/openssl.xml
+++ b/chapter08/openssl.xml
@@ -65,10 +65,13 @@
 
 <screen><userinput remap="test">make test</userinput></screen>
 
-    <para>One test, 30-test_afalg.t, is known to fail on some kernel
-    configurations (depending on inconsistent values of
-    CONFIG_CRYPTO_USER_API* settings.) If it fails, it can safely be
-    ignored.</para>
+    <para>One test, 30-test_afalg.t, is known to fail if the host kernel
+    does not have <option>CONFIG_CRYPTO_USER_API_SKCIPHER</option> enabled,
+    or does not have any options providing an AES with CBC implementation
+    (for example, the combination of <option>CONFIG_CRYPTO_AES</option>
+    and <option>CONFIG_CRYPTO_CBC</option>, or
+    <option>CONFIG_CRYPTO_AES_NI_INTEL</option> if the CPU supports AES-NI)
+    enabled.  If it fails, it can safely be ignored.</para>
 
     <para>Install the package:</para>
 
-- 
cgit v1.2.3-54-g00ecf