I could not get this working even on a 11.23 machine having latest (last
one released in December 2007).
Can anyone tell me the impact of not using +sectionmerge since it is not
working on 11.23.

I am also evaluating the possibility of using 11.31 and tried building
openssl on it, however, getting different error while bulding fips code
this time:

+ cc -I. -I.. -I../include -DOPENSSL_FIPSCANISTER +Z -DOPENSSL_PIC
-DOPENSSL_THREADS -DDSO_DLFCN -DHAVE_DLFCN_H -D_REENTRANT -Ae +DD64 +O3
+Olit=all -z -DB_ONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM
-DAES_ASM -DGHASH_ASM -DHMAC_EXT="sha1" -Wl,+sectionmerge -r -nostdlib -o
fipscanister.o fips_start.o fipo ../crypto/aes/aes_ecb.o
../crypto/aes/aes_ofb.o ../crypto/bn/bn_add.o ../crypto/bn/bn_blind.o
../crypto/bn/bn_ctx.o ../crypto/bn/bn_div.o ../crypto/bn/bn_/bn/bn_gcd.o
../crypto/bn/bn_lib.o ../crypto/bn/bn_mod.o ../crypto/bn/bn_mont.o
../crypto/bn/bn_mul.o ../crypto/bn/bn_nist.o ../crypto/bn/bn_prime.o
../cryp ../crypto/bn/bn_shift.o ../crypto/bn/bn_sqr.o
../crypto/bn/bn_word.o ../crypto/bn/bn_x931p.o ../crypto/buffer/buf_str.o
../crypto/cmac/cmac.o ../crypto/cryypto/des/cfb64enc.o
../crypto/des/cfb_enc.o ../crypto/des/ecb3_enc.o ../crypto/des/ofb64ede.o
../crypto/des/fcrypt.o ../crypto/des/set_key.o
../crypto/dh/dhto/dh/dh_key.o ../crypto/dsa/dsa_gen.o
../crypto/dsa/dsa_key.o ../crypto/dsa/dsa_ossl.o ../crypto/ec/ec_curve.o
../crypto/ec/ec_cvt.o ../crypto/ec/ec_key.o _mont.o ../crypto/ec/ec_mult.o
../crypto/ec/ecp_nist.o ../crypto/ec/ecp_smpl.o ../crypto/ecdh/ech_key.o
../crypto/ecdh/ech_ossl.o ../crypto/ecdsa/ecs_ossl.o_des3.o
../crypto/evp/e_null.o ../crypto/evp/m_sha1.o ../crypto/evp/m_dss1.o
../crypto/evp/m_dss.o ../crypto/evp/m_ecdsa.o ../crypto/hmac/hmac.o
../crypto/m ../crypto/modes/cfb128.o ../crypto/modes/ctr128.o
../crypto/modes/gcm128.o ../crypto/modes/ofb128.o ../crypto/modes/xts128.o
../crypto/rsa/rsa_eay.o ../crypt.o ../crypto/rsa/rsa_none.o
../crypto/rsa/rsa_oaep.o ../crypto/rsa/rsa_pk1.o ../crypto/rsa/rsa_pss.o
../crypto/rsa/rsa_ssl.o ../crypto/rsa/rsa_x931.o ../ca1dgst.o
../crypto/sha/sha256.o ../crypto/sha/sha512.o ../crypto/thr_id.o
../crypto/uid.o ../crypto/ia64cpuid.o ../crypto/bn/bn-ia64.o
../crypto/bn/ia64-mon/aes/aes_cbc.o ../crypto/aes/aes-ia64.o
../crypto/des/des_enc.o ../crypto/des/fcrypt_b.o ../crypto/sha/sha1-ia64.o
../crypto/sha/sha256-ia64.o ../crypto/shaa64.o sha/fips_sha1_selftest.o
hmac/fips_hmac_selftest.o rand/fips_rand.o rand/fips_rand_selftest.o
rand/fips_drbg_lib.o rand/fips_drbg_hash.o rand/fips_drbs_drbg_ec.o
rand/fips_drbg_selftest.o rand/fips_drbg_rand.o rand/fips_rand_lib.o
des/fips_des_selftest.o aes/fips_aes_selftest.o dsa/fips_dsa_selftest.o
dsaa/fips_rsa_selftest.o rsa/fips_rsa_sign.o rsa/fips_rsa_lib.o
dh/fips_dh_lib.o utl/fips_err.o utl/fips_md.o utl/fips_enc.o utl/fips_lck.o
utl/fips_mem.o ecdsgn.o ecdsa/fips_ecdsa_selftest.o
ecdh/fips_ecdh_selftest.o cmac/fips_cmac_selftest.o fips_end.o
(Bundled) cc: warning 922: "-Ae" is unsupported in the bundled compiler,
ignored.
(Bundled) cc: warning 922: "+O3" is unsupported in the bundled compiler,
ignored.
(Bundled) cc: warning 922: "+Olit=all" is unsupported in the bundled
compiler, ignored.
(Bundled) cc: warning 922: "-r" is unsupported in the bundled compiler,
ignored.
ld: Unsatisfied symbol "main" in file <no file>
1 errors.
*** Error exit code 1

Stop.
*** Error exit code 1

Stop.
*** Error exit code 1

Stop.

How to identify, from so many files which one it is complaining for? :(

Another build issue on HP-PA:
I am getting following error on HP-PA while building fips capable openssl:

make[2]: Entering directory `/openssl/hp-pa/openssl-1.0.1h'
[ -z "libcrypto" ] || cc +Z -DOPENSSL_PIC -DOPENSSL_THREADS  -DDSO_DL
-D_REENTRANT +DA2.0 +DS2.0 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN
-DMD32_XARRAY -D_REENTRANT -I/openssl/hp-pa/fips/include -Iinclude \
        -DFINGERPRINT_PREMAIN_DSO_LOAD -o fips_premain_dso  \
        /openssl/hp-pa/fips/lib/fips_premain.c
/openssl/hp-pa/fips/lib/fipscanister.o \
        libcrypto.a -Wl,+s -ldld
/usr/ccs/bin/ld: Duplicate symbol "$global$" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "$START$" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "$ARGV" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "_environ" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "_CPU_REVISION" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "_CPU_KEYBITS_1" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "_FPU_MODEL" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "_mcount" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "_clear_counters" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "_sr4export" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "__d_trap" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "$UNWIND_START" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "$UNWIND_END" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "$RECOVER_START" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "$RECOVER_END" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "__dld_flags" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "__dld_hook" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "__dld_list" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "_SYSTEM_ID" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "_FPU_REVISION" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "__d_trap_fptr" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "$PFA_C_START" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "$PFA_C_END" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "___init_start" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "___fini_start" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "___init_len" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Duplicate symbol "___fini_len" in files
/opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o
/usr/ccs/bin/ld: Found 27 duplicate symbol(s)
make[2]: *** [fips_premain_dso] Error 1
make[2]: Leaving directory `/openssl/hp-pa/openssl-1.0.1h'
make[1]: *** [shared] Error 2
make[1]: Leaving directory `/openssl/hp-pa/openssl-1.0.1h/crypto'
make: *** [build_crypto] Error 1

Config command used:
 ./config fips shared no-idea no-mdc2 no-ec2m  no-asm
--with-fipslibdir=/openssl/linux_ppc64/fips/lib/
--with-fipsdir=/openssl/linux_ppc64/fips


Anything I am missing here? :(

Thanks in advance.

Regards,
Mrunal


On Thu, Sep 4, 2014 at 4:27 PM, Mrunal Nerpawar <p.mru...@gmail.com> wrote:

> Thanks Andy,
>
> zLinux worked with "no-asm" thanks a ton!
>
> I am working on HP-UX now.
>
> Regards,
> Mrunal
>
>
> On Wed, Sep 3, 2014 at 9:11 PM, Andy Polyakov <ap...@openssl.org> wrote:
>
>> > In the ld man page, I could find help for option +nosectionmerge.
>> >            +nosectionmerge
>> >                           With the -r option, allow procedures to be
>> >                           positioned independently.  The default is to
>> merge
>> >                           all procedures into a single section.
>> > [This is what I have in my man page]
>> >
>> > If default is merge, do we really need to use option +sectionmerge in
>> > the LD flags?
>>
>> Yes. Despite what manual page says, it didn't do the sectionmerge (which
>> was resulting in crash upon startup). So do patch.
>>
>> > has the behavior changed in any patch recently?
>> > What is the impact if i remove it?
>>
>> Who can possibly answer these questions? Only HP, so talk to them. The
>> only thing known experimentally is that B.12.56 (see with ld -V) works,
>> while B.12.49 doesn't.
>>
>> > I could not find any help for zlinux. Any help is much appreciated.
>>
>> zLinux is not explicitly validated, it should be possible to resort for
>> ./config no-asm.
>> ______________________________________________________________________
>> OpenSSL Project                                 http://www.openssl.org
>> Development Mailing List                       openssl-dev@openssl.org
>> Automated List Manager                           majord...@openssl.org
>>
>
>

Reply via email to