We start with openssl-SNAP-20120118, and follow the directions. ./config fipscanisteronly make
We then create a restricted tarball. make -f Makefile.fips dist We take that tar file and extract it to openssl-fips-2.0-test Then we do the following: ./config make sudo make install The seems to work and it places the fipscanister.o under /usr/local/ssl/fips-2.0/lib Then per the guidance provided, we get openssl-1.0.1-stable-SNAP-20120118 and do the following: ./config fips (it says on the screen that we should do make depend, but we do not, per earlier email instructions) make We get the following errors: ../libcrypto.a(aes-x86_64.o): In function `asm_AES_encrypt': (.text+0x460): multiple definition of `asm_AES_encrypt' /usr/local/ssl/fips-2.0/lib//fipscanister.o:(.text+0x33fa0): first defined here ../libcrypto.a(aes-x86_64.o): In function `asm_AES_decrypt': (.text+0x9f0): multiple definition of `asm_AES_decrypt' /usr/local/ssl/fips-2.0/lib//fipscanister.o:(.text+0x34530): first defined here ../libcrypto.a(aes-x86_64.o): In function `asm_AES_cbc_encrypt': (.text+0xfa0): multiple definition of `asm_AES_cbc_encrypt' /usr/local/ssl/fips-2.0/lib//fipscanister.o:(.text+0x34ad0): first defined here collect2: ld returned 1 exit status That's as far as we get. Dr. Stephen Henson wrote: > > On Wed, Jan 18, 2012, Breakthrough wrote: > >> >> Steve, >> >> I'm having similar issues. This is all being done on Ubuntu 10.10. >> >> At first, I tried to get our FIPS 1.2 version to compile, so we could >> remain >> consistent with our 0.9.8 OpenSSL that we use in Windows, but we're >> getting >> all of the 32-bit unsigned error junk from binutils. >> >> So we decided to attempt to get FIPS 2.0 Test with the latest OpenSSL >> 1.0.1 >> Snapshot to work instead. >> >> We get the FIPS 2.0 to compile and install, and it puts the fipscanister >> under our /usr/local/ssl/fips-2.0 location; however, when we attempt to >> make >> the OpenSSL 1.0.1 snapshot work with the built FIPS, we get a problem. >> >> Essentially we're doing: >> >> ./config fips >> (it tells us to do the make depends, which we've tried, and we've >> ignored, >> it doesn't seem to matter) >> make >> >> We get compilation errors because the the libcrypto library is >> conflicting >> with the fipscanister object in the following areas. >> >> >> ../libcrypto.a(aes-x86_64.o): In function `asm_AES_encrypt': >> (.text+0x460): multiple definition of `asm_AES_encrypt' >> /usr/local/ssl/fips-2.0/lib//fipscanister.o:(.text+0x33fa0): first >> defined >> here >> ../libcrypto.a(aes-x86_64.o): In function `asm_AES_decrypt': >> (.text+0x9f0): multiple definition of `asm_AES_decrypt' >> /usr/local/ssl/fips-2.0/lib//fipscanister.o:(.text+0x34530): first >> defined >> here >> ../libcrypto.a(aes-x86_64.o): In function `asm_AES_cbc_encrypt': >> (.text+0xfa0): multiple definition of `asm_AES_cbc_encrypt' >> /usr/local/ssl/fips-2.0/lib//fipscanister.o:(.text+0x34ad0): first >> defined >> here >> > > Can you give details of how you compiled and installed the test 2.0 > module, > i.e. the commands you used? > > Steve. > -- > Dr Stephen N. Henson. OpenSSL project core developer. > Commercial tech support now available see: http://www.openssl.org > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > Development Mailing List openssl-dev@openssl.org > Automated List Manager majord...@openssl.org > > -- View this message in context: http://old.nabble.com/Build-Error-on-1.0.1-with-FIPS-tp31948446p33168400.html Sent from the OpenSSL - Dev mailing list archive at Nabble.com. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
