I cross compiled openssl 1.0.1c with FIPS with following commands:
For FIPS module:
./config
make
for openssl
./config fips no-asm shared
--with-fipsdir=/software/openssl/openssl-fips-2.0.2/
export FIPS_SIG=/software/openssl/openssl-fips-2.0.2/util/incore
changed fipsld line 132 to "${FIPS_SIG}" -dso "${TARGET}"
make
Everything was fine. openssl was working fine after installing in the target
machine.
I had to rebuild libcrypto for some reason. With the same options i did a
clear build and created libcrypto.so.1.0.0 .
But in the target system after installing, i get this when i run openssl.
[root@PC ~]# openssl
b69a5b834670cad92f1ecced70bc732857b3580e
[root@PC ~]# openssl ciphers
b69a5b834670cad92f1ecced70bc732857b3580e
[root@PC ~]
What does this mean?
both libcrypto.so.1.0.0 (earlier and new) are equal in size and symbols also
match.
[root@PC~]# nm -f 'sysv' *libcrypto.so.1.0.0_earler* |grep fips|grep .rodata
fips_des_sptrans |0000000000190aa0| R |
OBJECT|0000000000000800| |.rodata
fips_sha1_version |00000000001909e0| R |
OBJECT|0000000000000030| |.rodata
fips_sha256_version |0000000000190a20| R |
OBJECT|0000000000000033| |.rodata
fips_sha512_version |0000000000190a60| R |
OBJECT|0000000000000033| |.rodata
[root@PC~]# nm -f 'sysv' *libcrypto.so.1.0.0* |grep fips|grep .rodata
fips_des_sptrans |0000000000190aa0| R |
OBJECT|0000000000000800| |.rodata
fips_sha1_version |00000000001909e0| R |
OBJECT|0000000000000030| |.rodata
fips_sha256_version |0000000000190a20| R |
OBJECT|0000000000000033| |.rodata
fips_sha512_version |0000000000190a60| R |
OBJECT|0000000000000033| |.rodata
But diff command says they are different.
Is this something to do with env setup? I checked both Makefiles and they
are same.
Please some one help with this. I am frustrated with this
--
View this message in context:
http://openssl.6102.n7.nabble.com/FIPS-with-openssl-1-0-1c-strange-error-tp44927.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
