incore_macho when target is static library

2013-03-08 Thread Roar Lien
Hi, Has anyone experience with linking to fips enabled openssl from a static library on iOS? It appears as the incore_macho utility only supports dynamic libraries (for osx) or executables. Statically linking to openssl from an executable works without any problems by following the documentation.

Re: fipsld ./fips_premain_dso: No such file or directory

2013-02-25 Thread Roar Lien
According to the documentation, fips_premain_dso appears to be required when the application is a shared library. fips_premain_dso is part of the static build and it is referenced in fipsld. With that and adding lpthread and Bsymbolic to the command line I am able to link statically and enter

Re: fipsld ./fips_premain_dso: No such file or directory

2013-02-21 Thread Roar Lien
I am still not able to statically link my application to the fips enabled openssl under linux. My platform is Windows 8 - VMWare - CentOS 6.3. From what I described above, the initial problem comes from fipsld not being able to find the fips_premain_dso executable (it never gets built). I came

RE: fipsld ./fips_premain_dso: No such file or directory

2013-02-21 Thread Roar Lien
Thanks for the help Santhosh. Omitting fipscanisterbuild has no effect on the generation of fips_premain_dso. - Roar -- View this message in context: http://openssl.6102.n7.nabble.com/fipsld-fips-premain-dso-No-such-file-or-directory-tp43733p43877.html Sent from the OpenSSL - User mailing

fipsld ./fips_premain_dso: No such file or directory

2013-02-15 Thread Roar Lien
Hi, I am trying to build a shared library that statically links to a fips enabled openssl library under Linux. When I try to build my shared library using: 'make CC=/usr/local/ssl/fips-2.0/bin/fipsld FIPSLD_CC=gcc' I get an error saying: /usr/local/ssl/fips-2.0/bin/fipsld: line 137:

Re: fipsld ./fips_premain_dso: No such file or directory

2013-02-15 Thread Roar Lien
I tried to set the FIPS_SIG environment variable to point to the incore script in the 'util' directory of the fips distribution. The error message is now that my .so is not cross compiler aware. - Roar -- View this message in context:

Re: EVP_aes_256_gcm - Retrieving the MAC value

2013-01-25 Thread Roar Lien
Can anybody help me out with this one? - Roar -- View this message in context: http://openssl.6102.n7.nabble.com/EVP-aes-256-gcm-Retrieving-the-MAC-value-tp43070p43347.html Sent from the OpenSSL - User mailing list archive at Nabble.com.

Fips - Static - unresolved external symbol _mainCRTStartup

2013-01-18 Thread Roar Lien
Hi, I am having some difficulties linking my application to an openssl-fips static library. My development environment is VS2012 / Windows 8. I am able to build /install the openssl-fips distribution and I am able to enter fips mode in the openssl.exe application that comes with the

EVP_aes_256_gcm - Retrieving the MAC value

2013-01-09 Thread Roar Lien
Hi, This is an API question on using OpenSSL and AES GCM. I am successfully able to perform encryption / decryption and I am also able to detect errors in the mac value. The code I am using for this is below. I want to retrieve the mac value to my own buffer, in addition to just doing the

AES CBC Padding question

2013-01-04 Thread Roar Lien
Hi, I am experiencing an issue that has to do with the PKCS padding. I am using AES with CBC mode. When padding is enabled and the plain text buffer is size a multiple of the block size, the call to 'EVP_EncryptFinal_ex()' adds an entire extra block to the cipher text. If the input is a