Hi,
As I stumbled around trying to solve the SSLv3 handshake problem others
have been experiencing, I discovered it is a build problem! I've
included the process of how I verified to myself that it is a build
problem.
Background: I'm using NetBSD-sparc, OpenSSL v0.9.4 (9 Aug 1999)
I installed a new set of code to insure none of my "debugging" had
caused any problems. To get things to compile, I needed to do the
following:
1. run ./config with my directories
2. replace the crypto/objects/obj_data.h with an older copy
3. remove the -mv8 from CFLAG in the main Makefile
4. make (Note, I did fail the BN_add test when I ran "make test")
5. touch crypto/sha/sha1dgst.c
6. from crypto, I did a "make all"
This caused the complation to look like:
cc -I.. -I../../include -g -c sha1dgst.c
instead of the original:
gcc -I.. -I../../include -DTERMIOS -O3 -fomit-frame-pointer -Wall
-DB_ENDIAN -c sha1dgst.c
7. from apps, I did a "make all"
This caused the link to look like:
cc -o openssl -DMONOLITH -I../include -g -static openssl.o verify.o
asn1pars.o req.o dgst.o dh.o enc.o gendh.o errstr.o ca.o pkcs7.o
crl2p7.o crl.o rsa.o dsa.o dsaparam.o x509.o genrsa.o gendsa.o
s_server.o s_client.o speed.o s_time.o apps.o s_cb.o s_socket.o
version.o sess_id.o ciphers.o nseq.o pkcs12.o pkcs8.o -L.. -lssl -L..
-lcrypto
instead of the original:
gcc -o openssl -DMONOLITH -I../include -DTERMIOS -O3
-fomit-frame-pointer -Wall -DB_ENDIAN openssl.o verify.o asn1pars.o
req.o dgst.o dh.o enc.o gendh.o errstr.o ca.o pkcs7.o crl2p7.o crl.o
rsa.o dsa.o dsaparam.o x509.o genrsa.o gendsa.o s_server.o s_client.o
speed.o s_time.o apps.o s_cb.o s_socket.o version.o sess_id.o
ciphers.o nseq.o pkcs12.o pkcs8.o -L. -L.. -L../.. -L../../.. -L.. -lssl
-L.. -lcrypto
The recompiled code worked with both my code and the openssl program,
where both had previously failed in the same spot. Therefore, my
assumption is that the error came from the original compilation of
sha1dgst.c, and not just relinking the openssl program.
I didn't follow through to change the Makefile to eliminate this
problem. I would appreciate it if someone else would take a look at
that.
Thanks,
Rick
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
