I could not get this working even on a 11.23 machine having latest (last one released in December 2007). Can anyone tell me the impact of not using +sectionmerge since it is not working on 11.23.
I am also evaluating the possibility of using 11.31 and tried building openssl on it, however, getting different error while bulding fips code this time: + cc -I. -I.. -I../include -DOPENSSL_FIPSCANISTER +Z -DOPENSSL_PIC -DOPENSSL_THREADS -DDSO_DLFCN -DHAVE_DLFCN_H -D_REENTRANT -Ae +DD64 +O3 +Olit=all -z -DB_ONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DGHASH_ASM -DHMAC_EXT="sha1" -Wl,+sectionmerge -r -nostdlib -o fipscanister.o fips_start.o fipo ../crypto/aes/aes_ecb.o ../crypto/aes/aes_ofb.o ../crypto/bn/bn_add.o ../crypto/bn/bn_blind.o ../crypto/bn/bn_ctx.o ../crypto/bn/bn_div.o ../crypto/bn/bn_/bn/bn_gcd.o ../crypto/bn/bn_lib.o ../crypto/bn/bn_mod.o ../crypto/bn/bn_mont.o ../crypto/bn/bn_mul.o ../crypto/bn/bn_nist.o ../crypto/bn/bn_prime.o ../cryp ../crypto/bn/bn_shift.o ../crypto/bn/bn_sqr.o ../crypto/bn/bn_word.o ../crypto/bn/bn_x931p.o ../crypto/buffer/buf_str.o ../crypto/cmac/cmac.o ../crypto/cryypto/des/cfb64enc.o ../crypto/des/cfb_enc.o ../crypto/des/ecb3_enc.o ../crypto/des/ofb64ede.o ../crypto/des/fcrypt.o ../crypto/des/set_key.o ../crypto/dh/dhto/dh/dh_key.o ../crypto/dsa/dsa_gen.o ../crypto/dsa/dsa_key.o ../crypto/dsa/dsa_ossl.o ../crypto/ec/ec_curve.o ../crypto/ec/ec_cvt.o ../crypto/ec/ec_key.o _mont.o ../crypto/ec/ec_mult.o ../crypto/ec/ecp_nist.o ../crypto/ec/ecp_smpl.o ../crypto/ecdh/ech_key.o ../crypto/ecdh/ech_ossl.o ../crypto/ecdsa/ecs_ossl.o_des3.o ../crypto/evp/e_null.o ../crypto/evp/m_sha1.o ../crypto/evp/m_dss1.o ../crypto/evp/m_dss.o ../crypto/evp/m_ecdsa.o ../crypto/hmac/hmac.o ../crypto/m ../crypto/modes/cfb128.o ../crypto/modes/ctr128.o ../crypto/modes/gcm128.o ../crypto/modes/ofb128.o ../crypto/modes/xts128.o ../crypto/rsa/rsa_eay.o ../crypt.o ../crypto/rsa/rsa_none.o ../crypto/rsa/rsa_oaep.o ../crypto/rsa/rsa_pk1.o ../crypto/rsa/rsa_pss.o ../crypto/rsa/rsa_ssl.o ../crypto/rsa/rsa_x931.o ../ca1dgst.o ../crypto/sha/sha256.o ../crypto/sha/sha512.o ../crypto/thr_id.o ../crypto/uid.o ../crypto/ia64cpuid.o ../crypto/bn/bn-ia64.o ../crypto/bn/ia64-mon/aes/aes_cbc.o ../crypto/aes/aes-ia64.o ../crypto/des/des_enc.o ../crypto/des/fcrypt_b.o ../crypto/sha/sha1-ia64.o ../crypto/sha/sha256-ia64.o ../crypto/shaa64.o sha/fips_sha1_selftest.o hmac/fips_hmac_selftest.o rand/fips_rand.o rand/fips_rand_selftest.o rand/fips_drbg_lib.o rand/fips_drbg_hash.o rand/fips_drbs_drbg_ec.o rand/fips_drbg_selftest.o rand/fips_drbg_rand.o rand/fips_rand_lib.o des/fips_des_selftest.o aes/fips_aes_selftest.o dsa/fips_dsa_selftest.o dsaa/fips_rsa_selftest.o rsa/fips_rsa_sign.o rsa/fips_rsa_lib.o dh/fips_dh_lib.o utl/fips_err.o utl/fips_md.o utl/fips_enc.o utl/fips_lck.o utl/fips_mem.o ecdsgn.o ecdsa/fips_ecdsa_selftest.o ecdh/fips_ecdh_selftest.o cmac/fips_cmac_selftest.o fips_end.o (Bundled) cc: warning 922: "-Ae" is unsupported in the bundled compiler, ignored. (Bundled) cc: warning 922: "+O3" is unsupported in the bundled compiler, ignored. (Bundled) cc: warning 922: "+Olit=all" is unsupported in the bundled compiler, ignored. (Bundled) cc: warning 922: "-r" is unsupported in the bundled compiler, ignored. ld: Unsatisfied symbol "main" in file <no file> 1 errors. *** Error exit code 1 Stop. *** Error exit code 1 Stop. *** Error exit code 1 Stop. How to identify, from so many files which one it is complaining for? :( Another build issue on HP-PA: I am getting following error on HP-PA while building fips capable openssl: make[2]: Entering directory `/openssl/hp-pa/openssl-1.0.1h' [ -z "libcrypto" ] || cc +Z -DOPENSSL_PIC -DOPENSSL_THREADS -DDSO_DL -D_REENTRANT +DA2.0 +DS2.0 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY -D_REENTRANT -I/openssl/hp-pa/fips/include -Iinclude \ -DFINGERPRINT_PREMAIN_DSO_LOAD -o fips_premain_dso \ /openssl/hp-pa/fips/lib/fips_premain.c /openssl/hp-pa/fips/lib/fipscanister.o \ libcrypto.a -Wl,+s -ldld /usr/ccs/bin/ld: Duplicate symbol "$global$" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "$START$" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "$ARGV" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "_environ" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "_CPU_REVISION" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "_CPU_KEYBITS_1" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "_FPU_MODEL" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "_mcount" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "_clear_counters" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "_sr4export" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "__d_trap" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "$UNWIND_START" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "$UNWIND_END" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "$RECOVER_START" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "$RECOVER_END" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "__dld_flags" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "__dld_hook" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "__dld_list" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "_SYSTEM_ID" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "_FPU_REVISION" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "__d_trap_fptr" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "$PFA_C_START" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "$PFA_C_END" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "___init_start" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "___fini_start" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "___init_len" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Duplicate symbol "___fini_len" in files /opt/langtools/lib/crt0.o and /openssl/hp-pa/fips/lib/fipscanister.o /usr/ccs/bin/ld: Found 27 duplicate symbol(s) make[2]: *** [fips_premain_dso] Error 1 make[2]: Leaving directory `/openssl/hp-pa/openssl-1.0.1h' make[1]: *** [shared] Error 2 make[1]: Leaving directory `/openssl/hp-pa/openssl-1.0.1h/crypto' make: *** [build_crypto] Error 1 Config command used: ./config fips shared no-idea no-mdc2 no-ec2m no-asm --with-fipslibdir=/openssl/linux_ppc64/fips/lib/ --with-fipsdir=/openssl/linux_ppc64/fips Anything I am missing here? :( Thanks in advance. Regards, Mrunal On Thu, Sep 4, 2014 at 4:27 PM, Mrunal Nerpawar <p.mru...@gmail.com> wrote: > Thanks Andy, > > zLinux worked with "no-asm" thanks a ton! > > I am working on HP-UX now. > > Regards, > Mrunal > > > On Wed, Sep 3, 2014 at 9:11 PM, Andy Polyakov <ap...@openssl.org> wrote: > >> > In the ld man page, I could find help for option +nosectionmerge. >> > +nosectionmerge >> > With the -r option, allow procedures to be >> > positioned independently. The default is to >> merge >> > all procedures into a single section. >> > [This is what I have in my man page] >> > >> > If default is merge, do we really need to use option +sectionmerge in >> > the LD flags? >> >> Yes. Despite what manual page says, it didn't do the sectionmerge (which >> was resulting in crash upon startup). So do patch. >> >> > has the behavior changed in any patch recently? >> > What is the impact if i remove it? >> >> Who can possibly answer these questions? Only HP, so talk to them. The >> only thing known experimentally is that B.12.56 (see with ld -V) works, >> while B.12.49 doesn't. >> >> > I could not find any help for zlinux. Any help is much appreciated. >> >> zLinux is not explicitly validated, it should be possible to resort for >> ./config no-asm. >> ______________________________________________________________________ >> OpenSSL Project http://www.openssl.org >> Development Mailing List openssl-dev@openssl.org >> Automated List Manager majord...@openssl.org >> > >