Hello,
I have tested the OPENSSL-1.0.1-STABLE-SNAP-20101124 on platform: VMS IA64 V8.3
Here are the results and the patches.
The build went fine except the following informational messages...
These are not VMS specific issues, but regardless good to keep in mind and fix
soon or later.
bss_dgram.c
if (timeleft.tv_sec < 0)
....................^
%CC-I-QUESTCOMPARE, In this statement, the unsigned expression "timeleft.tv_sec"
is being compared with a relational operator to a constant whose value is not g
reater than zero. This might not be what you intended.
at line number 226 in file USRDSK:[ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.CRY
PTO.BIO]BSS_DGRAM.C;1
s23_clnt.c
(p[2] >= SSL3_VERSION_MINOR && p[2] <= TLS1_1_VERSION_MINOR) &&
..................^
%CC-I-QUESTCOMPARE, In this statement, the unsigned expression "p[2]" is being c
ompared with a relational operator to a constant whose value is not greater than
zero. This might not be what you intended.
at line number 622 in file USRDSK:[ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.SSL
]S23_CLNT.C;1
gost94_keyx
if (*outlen <= 0)
............^
%CC-I-QUESTCOMPARE, In this statement, the unsigned expression "*outlen" is bein
g compared with a relational operator to a constant whose value is not greater t
han zero. This might not be what you intended.
at line number 180 in file USRDSK:[ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.ENG
INES.CCGOST]GOST94_KEYX.C;1
Here are the errors and the patches that needs to be applied before I reached
the:
ALL TESTS SUCCESSFUL.
OpenSSL 1.0.1-dev xx XXX xxxx
built on: 25-NOV-2010 12:23:57.59
platform: VMS IA64 V8.3
options: bn(64,64) md2(int) rc4(ptr,int) des(ptr,risc1,16,long) idea(int)
blowfish(idx)
compiler: information not available
OPENSSLDIR: N/A
The test first dies with the text below, because the sslroot is nor correctly
set:
2071080376:error:02001006:system library:fopen:no such device or address:USRDSK:
[ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.CRYPTO.BIO]BSS_FILE.C;1:163:fopen('SS
LROOT:[000000]OPENSSL-VMS.CNF','r')
2071080376:error:2006D002:BIO routines:BIO_new_file:system lib:USRDSK:[ZAY.WORK.
OPENSSL-101-STABLE-SNAP-20101124.CRYPTO.BIO]BSS_FILE.C;1:168:
2071080376:error:0E078002:configuration file routines:DEF_LOAD:system lib:USRDSK
:[ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.CRYPTO.CONF]CONF_DEF.C;1:199:
2071080376:error:02001006:system library:fopen:no such device or address:USRDSK:
[ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.CRYPTO.BIO]BSS_FILE.C;1:163:fopen('SS
LROOT:[000000]OPENSSL-VMS.CNF','r')
2071080376:error:2006D002:BIO routines:BIO_new_file:system lib:USRDSK:[ZAY.WORK.
OPENSSL-101-STABLE-SNAP-20101124.CRYPTO.BIO]BSS_FILE.C;1:168:
2071080376:error:0E078002:configuration file routines:DEF_LOAD:system lib:USRDSK
:[ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.CRYPTO.CONF]CONF_DEF.C;1:199:
%BACKUP-E-OPENIN, error opening USRDSK:[ZAY.WORK.OPENSSL-101-STABLE-SNAP-2010112
4.TEST]P.TXT-CLEAR;1 as input
-RMS-E-FNF, file not found
2071080376:error:02001006:system library:fopen:no such device or address:USRDSK:
[ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.CRYPTO.BIO]BSS_FILE.C;1:163:fopen('SS
LROOT:[000000]OPENSSL-VMS.CNF','r')
2071080376:error:2006D002:BIO routines:BIO_new_file:system lib:USRDSK:[ZAY.WORK.
OPENSSL-101-STABLE-SNAP-20101124.CRYPTO.BIO]BSS_FILE.C;1:168:
2071080376:error:0E078002:configuration file routines:DEF_LOAD:system lib:USRDSK
:[ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.CRYPTO.CONF]CONF_DEF.C;1:199:
Solution:
In tests.com replace
$ sslroot = f$parse("sys$disk:[-.apps];",,,,"syntax_only") - "].;"+ ".]"
$ define /translation_attributes = concealed sslroot 'sslroot'
with
$ ROOT = F$PARSE(__here,"[]A.;0",,,"SYNTAX_ONLY,NO_CONCEAL") - "A.;0"
$ ROOT_DEV = F$PARSE(ROOT,,,"DEVICE","SYNTAX_ONLY")
$ ROOT_DIR = F$PARSE(ROOT,,,"DIRECTORY","SYNTAX_ONLY") -
- ".][000000" - "[000000." - "][" - "[" - "]" - ".TEST"
$ ROOT = ROOT_DEV + "[" + ROOT_DIR
$ DEFINE/NOLOG SSLROOT 'ROOT'.APPS.] /TRANS=CONC
This is a bit more complicated, but works with complicated concealed paths as
well.
I noticed that
---> TEST_AES
... is empty as the commented code shows:
$ test_aes:
$! write sys$output "test AES"
$! !mcr 'texe_dir''aestest'
...seems there is no aestest at all. Is there any purpose that this is here?
The test dies with
Sign the certificate? [y/n]:2071080376:error:24064064:random number
generator:SSLEAY_RAND_BYTES:PRNG not seeded:USRDSK
:[ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.CRYPTO.RAND]MD_RAND.C;1:522:You
need to read the OpenSSL FAQ, http://www.o
penssl.org/support/faq.html
2071080376:error:04088003:rsa routines:RSA_setup_blinding:BN
lib:USRDSK:[ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.CRY
PTO.RSA]RSA_LIB.C;1:426:
2071080376:error:04066044:rsa routines:RSA_EAY_PRIVATE_ENCRYPT:internal
error:USRDSK:[ZAY.WORK.OPENSSL-101-STABLE-SNAP
-20101124.CRYPTO.RSA]RSA_EAY.C;1:403:
2071080376:error:0D0C3006:asn1 encoding routines:ASN1_item_sign:EVP
lib:USRDSK:[ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101
124.CRYPTO.ASN1]A_SIGN.C;1:279:
OpenSSL 1.0.1-dev xx XXX xxxx
built on: 25-NOV-2010 12:23:57.59
platform: VMS IA64 V8.3
options: bn(64,64) md2(int) rc4(ptr,int) des(ptr,risc1,16,long) idea(int)
blowfish(idx)
compiler: information not available
OPENSSLDIR: N/A
Solution: define the RANDFILE logical
TITAN2_ZAY $ diff <.test>TESTGEN.COM
************
File USRDSK:<ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.TEST>TESTGEN.COM;2
1 $! TESTGEN.COM
2 $
******
File USRDSK:<ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.TEST>TESTGEN.COM;1
1 $! TETSGEN.COM
2 $
************
************
File USRDSK:<ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.TEST>TESTGEN.COM;2
20 $ define/nolog randfile <>.rnd
21 $ append/new nl: .rnd
******
File USRDSK:<ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.TEST>TESTGEN.COM;1
20 $
21 $ append/new nl: .rnd
************
The test fails with:
---> TEST_EVP
evptests.txt: no such file or directory
OpenSSL 1.0.1-dev xx XXX xxxx
built on: 25-NOV-2010 12:23:57.59
platform: VMS IA64 V8.3
options: bn(64,64) md2(int) rc4(ptr,int) des(ptr,risc1,16,long) idea(int)
blowfish(idx)
compiler: information not available
OPENSSLDIR: N/A
Solution: provide the right path to the evptests.txt file. In the tests.com
file the test_evp should look like this:
$ test_evp:
$ mcr 'texe_dir''evptest' 'ROOT'.CRYPTO.EVP]evptests.txt
$ return
The install went fine
Installation done!
You might want to purge
DSA104:[USERS.ZAY.WORK.OPENSSL-101-STABLE-SNAP-20101124.INSTALL...]
Thank you Richard.
You really did a good job.
...except the patches that are written above, I am reaming of the possibility
to choose between the 64 and the 32 bit version build and reuse this "not-used
option" in MAKEVMS.COM
TITAN2_ZAY $ @MAKEVMS.COM
USAGE: @MAKEVMS.COM [Target] [not-used option] [Debug option] <Compiler>
During the summer I have submitted a patch for this "feature"... wonder is
there any change for this code to be merged in?
Regards,
Z
