Hi

I already mentioned this in the opensssl-users maling list. Is it possible to 
build openssl without RSA,DA and DH support? Doing so i got erros like

 ./config --prefix=/home_vie/mhofer/tmp_opensslscratch 
 --openssldir=/home_vie/mhofer/tmp_opensslscratch/openssl no-threads no-zlib 
 no-shared no-bf no-cast no-des no-md2 no-mdc2 no-rc2 no-rc4 no-rc5 no-rsa 
 no-dsa no-dh; make depend; make
 
 the build crashes with:
 
 gcc -I.. -I../.. -I../../include -DDSO_DLFCN -DHAVE_DLFCN_H -march=pentium 
 -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall 
 -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM 
 -DRMD160_ASM -DAES_ASM   -c -o eng_cnf.o eng_cnf.c
> gcc -I.. -I../.. -I../../include -DDSO_DLFCN -DHAVE_DLFCN_H -march=pentium 
 -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall 
 -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM 
 -DRMD160_ASM -DAES_ASM   -c -o eng_dyn.o eng_dyn.c
 gcc -I.. -I../.. -I../../include -DDSO_DLFCN -DHAVE_DLFCN_H -march=pentium 
 -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall 
-DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM 
-DRMD160_ASM -DAES_ASM   -c -o eng_cryptodev.o eng_cryptodev.c
 In file included from eng_cryptodev.c:33:
 ../../include/openssl/dsa.h:71:2: error: #error DSA is disabled.
 In file included from eng_cryptodev.c:34:
 ../../include/openssl/rsa.h:74:2: error: #error RSA is disabled.
 In file included from eng_cryptodev.c:35:
 ../../include/openssl/dh.h:65:3: error: #error DH is disabled.
 make[2]: *** [eng_cryptodev.o] Error 1
 make[2]: Leaving directory 
 `/home_vie/mhofer/data/openssl-0.9.8o/crypto/engine'
 make[1]: *** [subdirs] Error 1
 make[1]: Leaving directory `/home_vie/mhofer/data/openssl-0.9.8o/crypto'
 make: *** [build_crypto] Error 1

Steve already told me that it would be easier to just take the corresponding 
code parts to work only with SHA,MD5 and HMAC

However, is it already knwon that compiling in this way leads to an error in 
the opensslversions 0.9.8.0o and 1.1.0a? If not, i would like to mention this. 
Maybe it is taken into account for a bugfix later on. Or is there already a 
bugfix?

Greetings
MAX
-- 
Neu: GMX De-Mail - Einfach wie E-Mail, sicher wie ein Brief!  
Jetzt De-Mail-Adresse reservieren: http://portal.gmx.net/de/go/demail
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to