Hi Ajit, It's not clear whether you need FIPS support or not, but it looks like you are attempting to build a FIPS-capable 1.0.1. When you pass the fips configuration flag that causes fipssyms.h to override the entry point names in order to link with the ones built into fipscanister. Either you need to build the fipscanister as Steve indicated, or not build 1.0.1 with the fips flag.
I cannot say whether the DRBG functionality can easily be backported to 0.9.8, as that is two releases back and internal API changes might require an effort to do that. Is there a reason you would not move to 1.0.1 once available? .................................... Erik Tkal Juniper OAC/UAC/Pulse Development -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Ajit Sarnaik via RT Sent: Wednesday, February 08, 2012 11:55 AM Cc: [email protected] Subject: RE: [openssl.org #2707] Build failure Hello Steve, Thanks for the quick response. Are the functions auto-generated? We are using 0.9.8 at present and wanted to incorporate DRBG support into it, that is why I was trying to compile some of the DRBG files, when I encountered the problem and was looking for the function body. Can you point me to the functions please. Regards, Ajit X4146 -----Original Message----- From: Stephen Henson via RT [mailto:[email protected]] Sent: Wednesday, February 08, 2012 5:28 AM To: Ajit Sarnaik Cc: [email protected] Subject: [openssl.org #2707] Build failure > [[email protected] - Wed Feb 08 10:21:27 2012]: > > Hello, > > I have been trying to build openssl from the source tar ball that I > down loaded from the web site. Noticed a bug in one of the perl > scripts. Below is the context diff. Encountering undefined symbols > from the file fips/utl/fips_enc.c with respect to functions used in > FIPS_get_cipherbynid. A few of the symbols are listed below, > > ../libcrypto.so: undefined reference to `FIPS_evp_aes_128_cfb128' > ../libcrypto.so: undefined reference to `FIPS_evp_aes_192_cfb128' > ../libcrypto.so: undefined reference to `FIPS_evp_aes_256_xts' > ../libcrypto.so: undefined reference to `FIPS_evp_aes_128_cfb1' > ../libcrypto.so: undefined reference to `FIPS_evp_aes_192_ccm' > ../libcrypto.so: undefined reference to `FIPS_evp_des_ede_cbc' > ../libcrypto.so: undefined reference to `FIPS_evp_des_ede_ofb' > ../libcrypto.so: undefined reference to `FIPS_evp_aes_192_ctr' > ../libcrypto.so: undefined reference to `FIPS_evp_aes_192_ecb' > > Are these functions auto-generated please. > The functions are part of the test 2.0 FIPS module. You need to build and install it from a fips snapshot and follow the instructions in README.FIPS to generate a FIPS capable OpenSSL 1.0.1 if that is what you want to do. > Has DRBG been ported to openssl-09.9.8 please. If not are there any > plans on doing that? > It wont happen as new features cannot be added to stable branches. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
