I'm trying to compile OpenSSL with rsaref2 on a SPARCserver 1000 running
Solaris 7.
GCC is version 2.8.1, OpenSSL is the 0.9.5 source distribution, and OpenSSH
is the 1.2.2 source distribution.
I've compliled rsaref2 with the CERT vulnerbility patch and installed
librsaref.a into /usr/local/lib and rsa.h into /usr/local/include.
After unpacking the OpenSSL source, I perform a:
./config rsaref
make
make test
make install
it compiles, all tests appear to complete, and installs. However, OpenSSH
complains of the lack of RSA support in the libraries. (LibRSAglue.a is
being installed into the /usr/local/ssl/lib directory correctly.)
I have contacted Damien Miller at the OpenSSH project, and he was kind
enough to send me some test code that he was working on to briefly test the
compiled libs for the necessary RSA functionality:
#include
#include
int main(void)
{
RSA *key;
key=RSA_generate_key(32,3,NULL,NULL);
if(key==NULL)
printf("NO RSA!\n");
else
printf("RSA OK!\n");
return(0);
}
I've compiled it with:
#!/bin/sh
gcc -o testrsa
testrsa.c -I/usr/local/ssl/include -L/usr/local/lib -L/usr/local/
ssl/lib \
-lcrypto -lRSAglue -lrsaref
./testrsa
Not surprisingly, it reports "NO RSA!"
Although I am a (noncommercial) USA resident (it isn't Christmas I'm waiting
for, it's September 20th!), and nominally supposed to use rsaref, I have
tried compliling without the "rsaref" parameter, with the same results.
I've also tried compiling SNAP-20000302, SNAP-20000302 w/"no-asm" no luck.
Here's the "make report" from the latest attempts (these builds take quite
some time on my SPARCserver 1000):
OpenSSL self-test report:
OpenSSL version: 0.9.6-dev
Last change: Include RAND_status() into RAND_METHOD instead of imple...
Options: no-asm
OS (uname): SunOS megaboz 5.7 Generic_106541-08 sun4d sparc
SUNW,SPARCserv
er-1000
OS (config): sun4d-sun-solaris2
Target (default): solaris-sparcv8-gcc
Target: solaris-sparcv8-gcc
Compiler: gcc version 2.8.1
Test passed.
Anyone experienced this, know anything about it? I'm going nuts!
Thanks,
-David Hesprich
--
David G. Hesprich, CISSP
Technical Solutions Consultant
Sprint Enterprise Network Services
Numeric Pager:800-724-3329 PIN 382-8387
Alpha Pager: [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
