Hello, What is the procedure for building a FIPS-capable OpenSSL snapshot on Ubuntu 8.04.4 LTS from the following snapshots: ftp://ftp.openssl.org/snapshot/openssl-1.0.1-stable-SNAP-20111031.tar.gz ftp://ftp.openssl.org/snapshot/openssl-fips-2.0-test-20111031.tar.gz
When I try to build it, I get the following compilation error: ====== In file included from hm_pmeth.c:64: ../evp/evp_locl.h:359:1: error: "SHA1_Init" redefined In file included from /tmp/foo/include/openssl/crypto.h:151, from ../cryptlib.h:72, from hm_pmeth.c:59: /tmp/foo/include/openssl/fipssyms.h:456:1: error: this is the location of the previous definition ====== Here are the build details: $ uname -a Linux harpo 2.6.24-29-generic #1 SMP Wed Aug 10 16:34:32 UTC 2011 i686 GNU/Linux $ cat /etc/lsb-release DISTRIB_ID=Ubuntu DISTRIB_RELEASE=8.04 DISTRIB_CODENAME=hardy DISTRIB_DESCRIPTION="Ubuntu 8.04.4 LTS" $ export FIPSDIR=/tmp/foo $ cd openssl-fips-2.0-test-20111031 $ ./config fipscanisterbuild no-asm ... ... Configured for linux-elf. $ make ... ... ./fips_standalone_sha1 fipscanister.o > fipscanister.o.sha1 ar r ../libcrypto.a fipscanister.o ar: creating ../libcrypto.a /usr/bin/ranlib ../libcrypto.a || echo Never mind. if [ "y" = "n" -a -n "fipscanister.o" ]; then ar r ../libcrypto.a fipscanister.o; fi make[2]: Leaving directory `/home/bdurant/svn/trunk/Crypto/Linux/openssl-fips-2.0-test-20111031/fips' make[1]: Leaving directory `/home/bdurant/svn/trunk/Crypto/Linux/openssl-fips-2.0-test-20111031/fips' $ make install ... ... installing fipsld installing fips_standalone_sha1 cp -p -f fipscanister.o fipscanister.o.sha1 \ fips_premain.c fips_premain.c.sha1 \ /tmp/foo/lib/; \ chmod 0444 /tmp/foo/lib/fips* make[1]: Leaving directory `/home/bdurant/svn/trunk/Crypto/Linux/openssl-fips-2.0-test-20111031/fips' making install in test... make[1]: Entering directory `/home/bdurant/svn/trunk/Crypto/Linux/openssl-fips-2.0-test-20111031/test' make[1]: Nothing to be done for `install'. make[1]: Leaving directory `/home/bdurant/svn/trunk/Crypto/Linux/openssl-fips-2.0-test-20111031/test' $ cd ../openssl-1.0.1-stable-SNAP-20111031/ $ echo $FIPSDIR /tmp/foo $ ./config fips --prefix=$FIPSDIR no-idea no-mdc2 no-rc5 no-asm ... ... Since you've disabled or enabled at least one algorithm, you need to do the following before building: make depend Configured for linux-elf. $ make depend making depend in crypto... make[1]: Entering directory `/home/bdurant/svn/trunk/Crypto/Linux/openssl-1.0.1-stable-SNAP-20111031/crypto' making depend in crypto/objects... make[2]: Entering directory `/home/bdurant/svn/trunk/Crypto/Linux/openssl-1.0.1-stable-SNAP-20111031/crypto/objects' ../../util/domd ../.. -MD gcc -- -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -I/tmp/foo/include -I.. -I../.. -I../modes -I../asn1 -I../evp -I../../include -DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_EC_NISTP_64_GCC_128 -DOPENSSL_NO_GMP -DOPENSSL_NO_IDEA -DOPENSSL_NO_JPAKE -DOPENSSL_NO_MD2 -DOPENSSL_NO_MDC2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_RFC3779 -DOPENSSL_NO_RSAX -DOPENSSL_NO_STORE -- o_names.c obj_dat.c obj_lib.c obj_err.c obj_xref.c ... ... make[2]: Entering directory `/home/bdurant/svn/trunk/Crypto/Linux/openssl-1.0.1-stable-SNAP-20111031/crypto/hmac' ../../util/domd ../.. -MD gcc -- -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -I/tmp/foo/include -I.. -I../.. -I../modes -I../asn1 -I../evp -I../../include -DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_EC_NISTP_64_GCC_128 -DOPENSSL_NO_GMP -DOPENSSL_NO_IDEA -DOPENSSL_NO_JPAKE -DOPENSSL_NO_MD2 -DOPENSSL_NO_MDC2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_RFC3779 -DOPENSSL_NO_RSAX -DOPENSSL_NO_STORE -- hmac.c hm_ameth.c hm_pmeth.c In file included from hm_pmeth.c:64: ../evp/evp_locl.h:359:1: error: "SHA1_Init" redefined In file included from /tmp/foo/include/openssl/crypto.h:151, from ../cryptlib.h:72, from hm_pmeth.c:59: /tmp/foo/include/openssl/fipssyms.h:456:1: error: this is the location of the previous definition Any ideas, Bill______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org