Re: bn_mul_mont_fpu multiply-defined error
On Wed, Jul 03, 2013, Zeke Evans wrote: I built the FIPS module as specified in the User Guide (only using ./config). The 'bn_mul_mont_fpu' multiply-defined error only occurs when building the fips capable code when using the 'shared' option (I only tested 1.0.1e and 1.0.1c). I don't think there is anything wrong with the FIPS module because I am able to use it to build 1.0.1e with 'fips' but without 'shared' being specified and all tests pass successfully. All symbols in the validated module should being fips_* or FIPS_* to avoid clashes but that one was overlooked. As a workaround I'd suggest renaming the symbol in the FIPS capable OpenSSL to something like ossl_bn_mul_mont_fpu. Make sure OpenSSL compiles *without* the fips option when you do that (to ensure you're using the correct symbol). Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
Re: bn_mul_mont_fpu multiply-defined error
That resolved the issue. Thanks! On Thu, Jul 4, 2013 at 4:22 AM, Dr. Stephen Henson st...@openssl.org wrote: On Wed, Jul 03, 2013, Zeke Evans wrote: I built the FIPS module as specified in the User Guide (only using ./config). The 'bn_mul_mont_fpu' multiply-defined error only occurs when building the fips capable code when using the 'shared' option (I only tested 1.0.1e and 1.0.1c). I don't think there is anything wrong with the FIPS module because I am able to use it to build 1.0.1e with 'fips' but without 'shared' being specified and all tests pass successfully. All symbols in the validated module should being fips_* or FIPS_* to avoid clashes but that one was overlooked. As a workaround I'd suggest renaming the symbol in the FIPS capable OpenSSL to something like ossl_bn_mul_mont_fpu. Make sure OpenSSL compiles *without* the fips option when you do that (to ensure you're using the correct symbol). Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
bn_mul_mont_fpu multiply-defined error building sparc64 fips capable shared object
I get an error building a fips capable shared object on sparc64. ./config fips shared make depend make ld: fatal: symbol 'bn_mul_mont_fpu' is multiply-defined: (file /usr/local/ssl/fips-2.0/lib//fipscanister.o type=FUNC; file libcrypto.a(sparcv9a-mont.o) type=FUNC); ld: fatal: file processing errors. No output written to libcrypto.so.1.0.0 make[4]: *** [link_a.solaris] Error 1 There are no errors if I build without the shared option. Is that not supported? Thanks, Zeke __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
bn_mul_mont_fpu multiply-defined error
I get an error building a fips capable shared object on sparc64. ./config fips shared make depend make ld: fatal: symbol 'bn_mul_mont_fpu' is multiply-defined: (file /usr/local/ssl/fips-2.0/lib//fipscanister.o type=FUNC; file libcrypto.a(sparcv9a-mont.o) type=FUNC); ld: fatal: file processing errors. No output written to libcrypto.so.1.0.0 make[4]: *** [link_a.solaris] Error 1 There are no errors if I build without the shared option. Is that not supported? Thanks, Zeke __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
RE: bn_mul_mont_fpu multiply-defined error
From the User Guide for the OpenSSL FIPS Object Module v2.0, section 3.2: note the ./config 'shared' option is forbidden by the terms of the validation when building a FIPS validated module, but the fipscanister.o object module can be used in a shared library. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Zeke Evans Sent: Wednesday, July 03, 2013 4:29 PM To: openssl-users@openssl.org Subject: bn_mul_mont_fpu multiply-defined error I get an error building a fips capable shared object on sparc64. ./config fips shared make depend make ld: fatal: symbol 'bn_mul_mont_fpu' is multiply-defined: (file /usr/local/ssl/fips-2.0/lib//fipscanister.o type=FUNC; file libcrypto.a(sparcv9a-mont.o) type=FUNC); ld: fatal: file processing errors. No output written to libcrypto.so.1.0.0 make[4]: *** [link_a.solaris] Error 1 There are no errors if I build without the shared option. Is that not supported? Thanks, Zeke __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
Re: bn_mul_mont_fpu multiply-defined error
I built the FIPS module as specified in the User Guide (only using ./config). The 'bn_mul_mont_fpu' multiply-defined error only occurs when building the fips capable code when using the 'shared' option (I only tested 1.0.1e and 1.0.1c). I don't think there is anything wrong with the FIPS module because I am able to use it to build 1.0.1e with 'fips' but without 'shared' being specified and all tests pass successfully. On Wed, Jul 3, 2013 at 4:50 PM, Porter, Andrew andrew_por...@bmc.com wrote: From the User Guide for the OpenSSL FIPS Object Module v2.0, section 3.2: note the ./config 'shared' option is forbidden by the terms of the validation when building a FIPS validated module, but the fipscanister.o object module can be used in a shared library. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Zeke Evans Sent: Wednesday, July 03, 2013 4:29 PM To: openssl-users@openssl.org Subject: bn_mul_mont_fpu multiply-defined error I get an error building a fips capable shared object on sparc64. ./config fips shared make depend make ld: fatal: symbol 'bn_mul_mont_fpu' is multiply-defined: (file /usr/local/ssl/fips-2.0/lib//fipscanister.o type=FUNC; file libcrypto.a(sparcv9a-mont.o) type=FUNC); ld: fatal: file processing errors. No output written to libcrypto.so.1.0.0 make[4]: *** [link_a.solaris] Error 1 There are no errors if I build without the shared option. Is that not supported? Thanks, Zeke __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
