testprogram results in undefined reference to x
Hello,
I compiled the last openssl from source with ./config --prefxi=/usr.
nano /usr/lib/pkgconfig/libssl.pc
Code:
prefix=/usr
exec_prefix=${prefix}
libdir=${exec_prefix}/lib
includedir=${prefix}/include
Name: OpenSSL
Description: Secure Sockets Layer and cryptography libraries
Version: 1.0.1e
Requires:
Libs: -L${libdir} -lssl -lcrypto
Libs.private: -ldl
Cflags: -I${includedir}
I tried to compile the following test program with "gcc ssl_accept.c -o
sslaccept -lssl 2> outputsslgcc":
Code:
/* confdefs.h. */
#define PACKAGE_NAME "Zarafa"
#define PACKAGE_TARNAME "zarafa"
#define PACKAGE_VERSION "7.0.0"
#define PACKAGE_STRING "Zarafa 7.0.0"
#define PACKAGE_BUGREPORT "zarafa-dev zarafa.com"
#define PACKAGE "zarafa"
#define VERSION "7.0.0"
#define STDC_HEADERS 1
#define HAVE_SYS_TYPES_H 1
#define HAVE_SYS_STAT_H 1
#define HAVE_STDLIB_H 1
#define HAVE_STRING_H 1
#define HAVE_MEMORY_H 1
#define HAVE_STRINGS_H 1
#define HAVE_INTTYPES_H 1
#define HAVE_STDINT_H 1
#define HAVE_UNISTD_H 1
#define HAVE_DLFCN_H 1
#define YYTEXT_POINTER 1
#define STDC_HEADERS 1
#define HAVE_STDBOOL_H 1
#define restrict __restrict
#define TIME_WITH_SYS_TIME 1
#define HAVE_NCURSES_H 1
#define HAVE_MEMORY_H 1
#define HAVE_STDDEF_H 1
#define HAVE_STDLIB_H 1
#define HAVE_STRING_H 1
#define HAVE_SYS_TIMEB_H 1
#define HAVE_WCHAR_H 1
#define HAVE_SYSLOG_H 1
#define HAVE_SYS_UN_H 1
#define HAVE_SYS_STAT_H 1
#define HAVE_OPENSSL_SSL_H 1
#define HAVE_ZLIB_H 1
#define HAVE_STDLIB_H 1
#define HAVE_MALLOC 1
#define HAVE_SYS_TIME_H 1
#define HAVE_UNISTD_H 1
#define HAVE_ALARM 1
#define HAVE_STDLIB_H 1
#define HAVE_REALLOC 1
#define HAVE_STRFTIME 1
#define HAVE_VPRINTF 1
#define RETSIGTYPE void
#define RETSIGTYPE void
#define HAVE_RANDOM 1
#define HAVE_GETTIMEOFDAY 1
#define HAVE_FTIME 1
#define HAVE_LOCALTIME_R 1
#define HAVE_TIMEGM 1
#define HAVE_GMTIME 1
#define HAVE_GMTIME_R 1
#define HAVE_MEMCHR 1
#define HAVE_MEMSET 1
#define HAVE_SELECT 1
#define HAVE_SOCKET 1
#define HAVE_STRCHR 1
#define HAVE_STRERROR 1
#define HAVE_STRRCHR 1
#define HAVE_STRSTR 1
#define HAVE_STRTOL 1
#define HAVE_STRTOUL 1
#define HAVE_STRTOLL 1
#define HAVE_STRTOULL 1
#define HAVE_SSCANF 1
#define HAVE_STRTOF_L 1
#define HAVE_STRTOD_L 1
#define HAVE_WCTOMB 1
#define HAVE_MBTOWC 1
#define HAVE_DCGETTEXT 1
#define HAVE_GETHOSTBYNAME_R 1
#define HAVE_GETPWNAM_R 1
#define HAVE_VSYSLOG 1
#define HAVE_MYSQL_SET_CHARACTER_SET 1
#define HAVE_VMIME_UTILITY_SMARTPTRINT_HPP 1
#define HAVE_LIBICAL_ICAL_H 1
#define HAVE_CLUCENE_H 1
#define HAVE_SHADOW_H 1
#define HAVE_LIBCRYPT 1
/* end confdefs.h. */
/* Override any GCC internal prototype to avoid an error.
Use char because int might match the return type of a GCC
builtin and then its argument prototype would still apply. */
#ifdef __cplusplus
extern "C"
#endif
char SSL_accept ();
int
main ()
{
return SSL_accept ();
;
return 0;
}
But I get a lot of undefinied function errors in libssl.a like this:
/usr/lib/gcc/sparc-unknown-linux-gnu/4.6.0/../../../libssl.a(ssl_lib.o)(.text+0x368):
In function `ssl_undefined_function':
: undefined reference to `ERR_put_error'
/usr/lib/gcc/sparc-unknown-linux-gnu/4.6.0/../../../libssl.a(ssl_lib.o)(.text+0x3c8):
In function `SSL_CTX_free.part.5':
: undefined reference to `X509_VERIFY_PARAM_free'
/usr/lib/gcc/sparc-unknown-linux-gnu/4.6.0/../../../libssl.a(ssl_lib.o)(.text+0x3f0):
In function `SSL_CTX_free.part.5':
: undefined reference to `CRYPTO_free_ex_data'
/usr/lib/gcc/sparc-unknown-linux-gnu/4.6.0/../../../libssl.a(ssl_lib.o)(.text+0x408):
In function `SSL_CTX_free.part.5':
: undefined reference to `lh_free'
/usr/lib/gcc/sparc-unknown-linux-gnu/4.6.0/../../../libssl.a(ssl_lib.o)(.text+0x420):
In function `SSL_CTX_free.part.5':
: undefined reference to `X509_STORE_free'
/usr/lib/gcc/sparc-unknown-linux-gnu/4.6.0/../../../libssl.a(ssl_lib.o)(.text+0x438):
In function `SSL_CTX_free.part.5':
: undefined reference to `sk_free'
/usr/lib/gcc/sparc-unknown-linux-gnu/4.6.0/../../../libssl.a(ssl_lib.o)(.text+0x450):
In function `SSL_CTX_free.part.5':
: undefined reference to `sk_free'
/usr/lib/gcc/sparc-unknown-linux-gnu/4.6.0/../../../libssl.a(ssl_lib.o)(.text+0x480):
In function `SSL_CTX_free.part.5':
: undefined reference to `X509_NAME_free'
/usr/lib/gcc/sparc-unknown-linux-gnu/4.6.0/../../../libssl.a(ssl_lib.o)(.text+0x484):
In function `SSL_CTX_free.part.5':
: undefined reference to `sk_pop_free'[...]
If I do objdump /usr/lib/libssl.a -t it prints for example:
s2_srvr.o: file format elf32-sparc
SYMBOL TABLE:
l df *ABS* s2_srvr.c
l d .text
l d .data
l d .bss
l F .text 001c ssl2_get_server_method
l O .rodata0074 SSLv2_server_method_data.14895
l d .rodata.str1.8
l d .rodata
l d .
Re: fipslink
Alrite Thanks Jon! Did anyone else had any success on linking your application with fips capable static libraries? I have been stuck on this and I would appreciate any help. Thanks Raghav On Wed, Apr 3, 2013 at 6:15 PM, Jon Evers wrote: > I could either get it to link, but fail the premain test or not get it > to link. I never did get even a simple application to compile and run.*** > * > > I haven’t had time since my last post to work on it. I’ve been side > tracked by our (way behind) software release. > > -Jon Evers > -- > > *From:* owner-openssl-us...@openssl.org [mailto: > owner-openssl-us...@openssl.org] *On Behalf Of *Raghav Varadan > *Sent:* Wednesday, April 03, 2013 5:59 PM > > *To:* openssl-users@openssl.org > *Subject:* Re: fipslink > > > ** ** > > Jon, > > I have the same problem that you were mentioning in your thread. I built a > batch file similar to yours and I'm getting the link error in the first > pass. Were you able to find a solution for this? > > > > > > > Following are the link errors I'm getting: > > fips_premain.obj : error LNK2001: unresolved external symbol "unsigned > char * FIPS_signature" (?FIPS_signature@@3PAEA) > fips_premain.obj : error LNK2019: unresolved external symbol "unsigned int > __cdecl FIPS_incore_fingerprint(unsigned char *,unsigned int)" (?FIPS_incor > e_fingerprint@@YAIPEAEI@Z) referenced in function "void __cdecl > FINGERPRINT_premain(void)" (?FINGERPRINT_premain@@YAXXZ) > fips_premain.obj : error LNK2019: unresolved external symbol "void const * > __cdecl FIPS_text_start(void)" (?FIPS_text_start@@YAPEBXXZ) referenced in > f > unction "void __cdecl FINGERPRINT_premain(void)" (?FINGERPRINT_premain@ > @YAXXZ) > > > > --- > > > Here is my log: > > > D:\TestPrograms\TestFIPSOpenssl>cl /Od /I > "D:\OpenSSL\deploy\Applications_win64_x64\include" /I > "D:\Dev\WrkSpace_Main\depot\ExternalLibs\OpenSSL\1.0.1c-fips2.0.3\fips-src\include" > /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_UNICODE" /D "UNICODE" /Gm /EHsc > /RTC1 /MDd /Fo"x64\Debug\\" /Fd"x64\Debug\vc90.pdb" /W3 /nologo /c /Zi /TC > /errorReport:prompt main.c > main.c > > D:\TestPrograms\TestFIPSOpenssl>fips_build_script.bat > > D:\TestPrograms\TestFIPSOpenssl>SET > FIPS_PATH=D:\OpenSSL\deploy\Applications_win64_x64 > > D:\TestPrograms\TestFIPSOpenssl>SET FIPS_LINK=link > > D:\TestPrograms\TestFIPSOpenssl>SET FIPS_CC=cl > > D:\TestPrograms\TestFIPSOpenssl>SET FIPS_CC_ARGS=/Fo > D:\TestPrograms\TestFIPSOpenssl\x64\Debug\fips_premain.obj > -ID:\Dev\WrkSpace_Ma > in\depot\ExternalLibs\OpenSSL\1.0.1c-fips2.0.3\_deploy\Applications_win64_x64\include > /MD /O1 -DOPENSSL_THREADS -DDSO_WIN32 -DOPENSSL_NO_ERR -W3 -Gs0 > -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN > -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE > -ID:\Dev\WrkSpace_Main\depot\Ext > ernalLibs\OpenSSL\1.0.1c-fips2.0.3\_deploy\Applications_win64_x64/include/GS > -DOPENSSL_NO_IDEA -DOPENSSL_NO_CAMELLIA -DOPENSSL_NO_SEED -DOPENSSL_NO_RC > 2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_MD2 -DOPENSSL_NO_RIPEMD -DOPENSSL_NO_MDC2 > -DOPENSSL_NO_BF -DOPENSSL_NO_CAST -DOPENSSL_NO_DH -DOPENSSL_NO_WHIRLPOOL -DO > PENSSL_NO_SSL2 -DOPENSSL_NO_CMS -DOPENSSL_NO_ERR -DOPENSSL_NO_KRB5 > -DOPENSSL_NO_GOST -DOPENSSL_NO_HW -DOPENSSL_FIPS -DOPENSSL_NO_JPAKE > -DOPENSSL_NO_DY > NAMIC_ENGINE /Zl /Z7 -c > > D:\TestPrograms\TestFIPSOpenssl>SET PREMAIN_DSO_EXE= > > D:\TestPrograms\TestFIPSOpenssl>SET > FIPS_TARGET=D:\TestPrograms\TestFIPSOpenssl\x64\Debug\TestFIPSOpenssl.exe > > D:\TestPrograms\TestFIPSOpenssl>SET > FIPS_SHA1_EXE=D:\OpenSSL\deploy\Applications_win64_x64\bin\fips_standalone_sha1.exe > > D:\TestPrograms\TestFIPSOpenssl>SET > FIPSLIB_D=D:\OpenSSL\deploy\Applications_win64_x64\lib > > D:\TestPrograms\TestFIPSOpenssl>perl > D:\OpenSSL\deploy\Applications_win64_x64\bin\fips > link.pl/OUT:"D:\TestPrograms\TestFIPSOpenssl\x64\Debug\TestFIPSOpenssl.exe" > /NOLOGO /LIBPATH:"D:\Dev\WrkSpace_Main\depot\ExternalLibs\OpenSS > L\1.0.1c-fips2.0.3\_deploy\Applications_win64_x64\lib" /MANIFEST > /MANIFESTFILE:\"x64\Debug\TestFIPSOpenssl.exe.intermediate.manifest\" > /MANIFESTUAC:\" > level='asInvoker' uiAccess='false'\" /DEBUG > /PDB:\"D:\TestPrograms\TestFIPSOpenssl\x64\Debug\TestFIPSOpenssl.pdb\" > /SUBSYSTEM:CONSOLE /DYNAMI > CBASE /NXCOMPAT /MACHINE:X64 /ERRORREPORT:PROMPT fipscanister.lib > opensslcryptofips.lib opensslssl.lib kernel32.lib user32.lib gdi32.lib > winspool.lib > comdlg32.lib advapi32.lib shell32.lib ole32.lib oleaut32.lib uuid.lib > odbc32.lib odbccp32.lib x64\Debug\main.obj x64\Debug\fips_premain.obj > > Integrity check OK > > cl /Fo D:\TestPro
RE: fipslink
I could either get it to link, but fail the premain test or not get it to link. I never did get even a simple application to compile and run. I haven't had time since my last post to work on it. I've been side tracked by our (way behind) software release. -Jon Evers From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Raghav Varadan Sent: Wednesday, April 03, 2013 5:59 PM To: openssl-users@openssl.org Subject: Re: fipslink Jon, I have the same problem that you were mentioning in your thread. I built a batch file similar to yours and I'm getting the link error in the first pass. Were you able to find a solution for this? Following are the link errors I'm getting: fips_premain.obj : error LNK2001: unresolved external symbol "unsigned char * FIPS_signature" (?FIPS_signature@@3PAEA) fips_premain.obj : error LNK2019: unresolved external symbol "unsigned int __cdecl FIPS_incore_fingerprint(unsigned char *,unsigned int)" (?FIPS_incor e_fingerprint@@YAIPEAEI@Z) referenced in function "void __cdecl FINGERPRINT_premain(void)" (?FINGERPRINT_premain@@YAXXZ) fips_premain.obj : error LNK2019: unresolved external symbol "void const * __cdecl FIPS_text_start(void)" (?FIPS_text_start@@YAPEBXXZ) referenced in f unction "void __cdecl FINGERPRINT_premain(void)" (?FINGERPRINT_premain@@YAXXZ) --- Here is my log: D:\TestPrograms\TestFIPSOpenssl>cl /Od /I "D:\OpenSSL\deploy\Applications_win64_x64\include" /I "D:\Dev\WrkSpace_Main\depot\ExternalLibs\OpenSSL\1.0.1c-fips2.0.3\fips-s rc\include" /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_UNICODE" /D "UNICODE" /Gm /EHsc /RTC1 /MDd /Fo"x64\Debug\\" /Fd"x64\Debug\vc90.pdb" /W3 /nologo /c /Zi /TC /errorReport:prompt main.c main.c D:\TestPrograms\TestFIPSOpenssl>fips_build_script.bat D:\TestPrograms\TestFIPSOpenssl>SET FIPS_PATH=D:\OpenSSL\deploy\Applications_win64_x64 D:\TestPrograms\TestFIPSOpenssl>SET FIPS_LINK=link D:\TestPrograms\TestFIPSOpenssl>SET FIPS_CC=cl D:\TestPrograms\TestFIPSOpenssl>SET FIPS_CC_ARGS=/Fo D:\TestPrograms\TestFIPSOpenssl\x64\Debug\fips_premain.obj -ID:\Dev\WrkSpace_Ma in\depot\ExternalLibs\OpenSSL\1.0.1c-fips2.0.3\_deploy\Applications_win6 4_x64\include /MD /O1 -DOPENSSL_THREADS -DDSO_WIN32 -DOPENSSL_NO_ERR -W3 -Gs0 -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE -ID:\Dev\WrkSpace_Main\depot\Ext ernalLibs\OpenSSL\1.0.1c-fips2.0.3\_deploy\Applications_win64_x64/includ e/GS -DOPENSSL_NO_IDEA -DOPENSSL_NO_CAMELLIA -DOPENSSL_NO_SEED -DOPENSSL_NO_RC 2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_MD2 -DOPENSSL_NO_RIPEMD -DOPENSSL_NO_MDC2 -DOPENSSL_NO_BF -DOPENSSL_NO_CAST -DOPENSSL_NO_DH -DOPENSSL_NO_WHIRLPOOL -DO PENSSL_NO_SSL2 -DOPENSSL_NO_CMS -DOPENSSL_NO_ERR -DOPENSSL_NO_KRB5 -DOPENSSL_NO_GOST -DOPENSSL_NO_HW -DOPENSSL_FIPS -DOPENSSL_NO_JPAKE -DOPENSSL_NO_DY NAMIC_ENGINE /Zl /Z7 -c D:\TestPrograms\TestFIPSOpenssl>SET PREMAIN_DSO_EXE= D:\TestPrograms\TestFIPSOpenssl>SET FIPS_TARGET=D:\TestPrograms\TestFIPSOpenssl\x64\Debug\TestFIPSOpenssl.ex e D:\TestPrograms\TestFIPSOpenssl>SET FIPS_SHA1_EXE=D:\OpenSSL\deploy\Applications_win64_x64\bin\fips_standalo ne_sha1.exe D:\TestPrograms\TestFIPSOpenssl>SET FIPSLIB_D=D:\OpenSSL\deploy\Applications_win64_x64\lib D:\TestPrograms\TestFIPSOpenssl>perl D:\OpenSSL\deploy\Applications_win64_x64\bin\fips link.pl /OUT:"D:\TestPrograms\TestFIPSOpenssl\x64\Debug\TestFIPSOpenssl.exe" /NOLOGO /LIBPATH:"D:\Dev\WrkSpace_Main\depot\ExternalLibs\OpenSS L\1.0.1c-fips2.0.3\_deploy\Applications_win64_x64\lib" /MANIFEST /MANIFESTFILE:\"x64\Debug\TestFIPSOpenssl.exe.intermediate.manifest\" /MANIFESTUAC:\" level='asInvoker' uiAccess='false'\" /DEBUG /PDB:\"D:\TestPrograms\TestFIPSOpenssl\x64\Debug\TestFIPSOpenssl.pdb\" /SUBSYSTEM:CONSOLE /DYNAMI CBASE /NXCOMPAT /MACHINE:X64 /ERRORREPORT:PROMPT fipscanister.lib opensslcryptofips.lib opensslssl.lib kernel32.lib user32.lib gdi32.lib winspool.lib comdlg32.lib advapi32.lib shell32.lib ole32.lib oleaut32.lib uuid.lib odbc32.lib odbccp32.lib x64\Debug\main.obj x64\Debug\fips_premain.obj Integrity check OK cl /Fo D:\TestPrograms\TestFIPSOpenssl\x64\Debug\fips_premain.obj -ID:\OpenSSL\deploy\ Applications_win64_x64\include /MD /O1 -DOPENSSL_THREADS -DDSO_WIN32 -DOPENSSL_NO_ERR -W3 -Gs0 -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_M EAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE -ID:\OpenSSL\deploy\Applications _win64_x64/include/GS -DOPENSSL_NO_IDEA -DOPENSSL_NO_CAMELLIA -DOPENSSL_NO_SEED -DOPENSSL_NO_RC2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_MD2 -DOPENSSL_NO_RIPEMD -DOPENSSL_NO_MDC2 -DOP
Re: fipslink
Jon, I have the same problem that you were mentioning in your thread. I built a batch file similar to yours and I'm getting the link error in the first pass. Were you able to find a solution for this? Following are the link errors I'm getting: fips_premain.obj : error LNK2001: unresolved external symbol "unsigned char * FIPS_signature" (?FIPS_signature@@3PAEA) fips_premain.obj : error LNK2019: unresolved external symbol "unsigned int __cdecl FIPS_incore_fingerprint(unsigned char *,unsigned int)" (?FIPS_incor e_fingerprint@@YAIPEAEI@Z) referenced in function "void __cdecl FINGERPRINT_premain(void)" (?FINGERPRINT_premain@@YAXXZ) fips_premain.obj : error LNK2019: unresolved external symbol "void const * __cdecl FIPS_text_start(void)" (?FIPS_text_start@@YAPEBXXZ) referenced in f unction "void __cdecl FINGERPRINT_premain(void)" (?FINGERPRINT_premain@ @YAXXZ) --- Here is my log: D:\TestPrograms\TestFIPSOpenssl>cl /Od /I "D:\OpenSSL\deploy\Applications_win64_x64\include" /I "D:\Dev\WrkSpace_Main\depot\ExternalLibs\OpenSSL\1.0.1c-fips2.0.3\fips-src\include" /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_UNICODE" /D "UNICODE" /Gm /EHsc /RTC1 /MDd /Fo"x64\Debug\\" /Fd"x64\Debug\vc90.pdb" /W3 /nologo /c /Zi /TC /errorReport:prompt main.c main.c D:\TestPrograms\TestFIPSOpenssl>fips_build_script.bat D:\TestPrograms\TestFIPSOpenssl>SET FIPS_PATH=D:\OpenSSL\deploy\Applications_win64_x64 D:\TestPrograms\TestFIPSOpenssl>SET FIPS_LINK=link D:\TestPrograms\TestFIPSOpenssl>SET FIPS_CC=cl D:\TestPrograms\TestFIPSOpenssl>SET FIPS_CC_ARGS=/Fo D:\TestPrograms\TestFIPSOpenssl\x64\Debug\fips_premain.obj -ID:\Dev\WrkSpace_Ma in\depot\ExternalLibs\OpenSSL\1.0.1c-fips2.0.3\_deploy\Applications_win64_x64\include /MD /O1 -DOPENSSL_THREADS -DDSO_WIN32 -DOPENSSL_NO_ERR -W3 -Gs0 -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE -ID:\Dev\WrkSpace_Main\depot\Ext ernalLibs\OpenSSL\1.0.1c-fips2.0.3\_deploy\Applications_win64_x64/include/GS -DOPENSSL_NO_IDEA -DOPENSSL_NO_CAMELLIA -DOPENSSL_NO_SEED -DOPENSSL_NO_RC 2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_MD2 -DOPENSSL_NO_RIPEMD -DOPENSSL_NO_MDC2 -DOPENSSL_NO_BF -DOPENSSL_NO_CAST -DOPENSSL_NO_DH -DOPENSSL_NO_WHIRLPOOL -DO PENSSL_NO_SSL2 -DOPENSSL_NO_CMS -DOPENSSL_NO_ERR -DOPENSSL_NO_KRB5 -DOPENSSL_NO_GOST -DOPENSSL_NO_HW -DOPENSSL_FIPS -DOPENSSL_NO_JPAKE -DOPENSSL_NO_DY NAMIC_ENGINE /Zl /Z7 -c D:\TestPrograms\TestFIPSOpenssl>SET PREMAIN_DSO_EXE= D:\TestPrograms\TestFIPSOpenssl>SET FIPS_TARGET=D:\TestPrograms\TestFIPSOpenssl\x64\Debug\TestFIPSOpenssl.exe D:\TestPrograms\TestFIPSOpenssl>SET FIPS_SHA1_EXE=D:\OpenSSL\deploy\Applications_win64_x64\bin\fips_standalone_sha1.exe D:\TestPrograms\TestFIPSOpenssl>SET FIPSLIB_D=D:\OpenSSL\deploy\Applications_win64_x64\lib D:\TestPrograms\TestFIPSOpenssl>perl D:\OpenSSL\deploy\Applications_win64_x64\bin\fips link.pl/OUT:"D:\TestPrograms\TestFIPSOpenssl\x64\Debug\TestFIPSOpenssl.exe" /NOLOGO /LIBPATH:"D:\Dev\WrkSpace_Main\depot\ExternalLibs\OpenSS L\1.0.1c-fips2.0.3\_deploy\Applications_win64_x64\lib" /MANIFEST /MANIFESTFILE:\"x64\Debug\TestFIPSOpenssl.exe.intermediate.manifest\" /MANIFESTUAC:\" level='asInvoker' uiAccess='false'\" /DEBUG /PDB:\"D:\TestPrograms\TestFIPSOpenssl\x64\Debug\TestFIPSOpenssl.pdb\" /SUBSYSTEM:CONSOLE /DYNAMI CBASE /NXCOMPAT /MACHINE:X64 /ERRORREPORT:PROMPT fipscanister.lib opensslcryptofips.lib opensslssl.lib kernel32.lib user32.lib gdi32.lib winspool.lib comdlg32.lib advapi32.lib shell32.lib ole32.lib oleaut32.lib uuid.lib odbc32.lib odbccp32.lib x64\Debug\main.obj x64\Debug\fips_premain.obj Integrity check OK cl /Fo D:\TestPrograms\TestFIPSOpenssl\x64\Debug\fips_premain.obj -ID:\OpenSSL\deploy\ Applications_win64_x64\include /MD /O1 -DOPENSSL_THREADS -DDSO_WIN32 -DOPENSSL_NO_ERR -W3 -Gs0 -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_M EAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE -ID:\OpenSSL\deploy\Applications _win64_x64/include/GS -DOPENSSL_NO_IDEA -DOPENSSL_NO_CAMELLIA -DOPENSSL_NO_SEED -DOPENSSL_NO_RC2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_MD2 -DOPENSSL_NO_RIPEMD -DOPENSSL_NO_MDC2 -DOPENSSL_NO_BF -DOPENSSL_NO_CAST -DOPENSSL_NO_DH -DOPENSSL_NO_WHIRLPOOL -DOPENSSL_NO_SSL2 -DOPENSSL_NO_CMS -DOPENSSL_NO_ERR -DOPEN SSL_NO_KRB5 -DOPENSSL_NO_GOST -DOPENSSL_NO_HW -DOPENSSL_FIPS -DOPENSSL_NO_JPAKE -DOPENSSL_NO_DYNAMIC_ENGINE /Zl /Z7 -c D:\Dev\WrkSpace_Main\depot \ExternalLibs\OpenSSL\1.0.1c-fips2.0.3\_deploy\Applications_win64_x64\lib/fips_premain.c cl : Command line warning D9027 : source file 'D:\TestPrograms\TestFIPSOpenssl\x64\Debug\fips_premain.obj' ignored fips_premain.c link /OUT:D:\TestProgra
CMP key update - Which key to be used?
Hello, I need to update my end entity certificate using CMP key update request. There are 2 possibilities for the private key to be used - 'existing' or 'new'. RFC 4210 says: "When a key pair is due to expire, the relevant end entity MAY request a key update; that is, it MAY request that the CA issue a new certificate for a new key pair (or, in certain circumstances, a new certificate for the same key pair). ". Q1. Is there any valid use case, where i need a new certificate for the same(existing) key pair ? Or, is it ok, if i mandate my application to always use a new key pair ? Q2. In case of end entity certificate update/rekey, is there any policy available for the CA to revoke the old end entity certificate, after issuing a new certificate ? [provided the old end entity certificate is not yet expired] Appreciate an early reply. Regards, Sanjaya
Recommend your friends to use Puffin Web Browser Free
Recommend your friends to use Puffin Web Browser Free.
