On Thu, Jan 19, 2012, Dr. Stephen Henson wrote:

> On Wed, Jan 18, 2012, Breakthrough wrote:
> 
> > 
> > Steve,
> > 
> > I'm having similar issues.  This is all being done on Ubuntu 10.10.
> > 
> > At first, I tried to get our FIPS 1.2 version to compile, so we could remain
> > consistent with our 0.9.8 OpenSSL that we use in Windows, but we're getting
> > all of the 32-bit unsigned error junk from binutils.
> > 
> > So we decided to attempt to get FIPS 2.0 Test with the latest OpenSSL 1.0.1
> > Snapshot to work instead.
> > 
> > We get the FIPS 2.0 to compile and install, and it puts the fipscanister
> > under our /usr/local/ssl/fips-2.0 location; however, when we attempt to make
> > the OpenSSL 1.0.1 snapshot work with the built FIPS, we get a problem.
> > 
> > Essentially we're doing:
> > 
> > ./config fips
> > (it tells us to do the make depends, which we've tried, and we've ignored,
> > it doesn't seem to matter)
> > make
> > 
> > We get compilation errors because the the libcrypto library is conflicting
> > with the fipscanister object in the following areas.
> > 
> > 
> > ../libcrypto.a(aes-x86_64.o): In function `asm_AES_encrypt':
> > (.text+0x460): multiple definition of `asm_AES_encrypt'
> > /usr/local/ssl/fips-2.0/lib//fipscanister.o:(.text+0x33fa0): first defined
> > here
> > ../libcrypto.a(aes-x86_64.o): In function `asm_AES_decrypt':
> > (.text+0x9f0): multiple definition of `asm_AES_decrypt'
> > /usr/local/ssl/fips-2.0/lib//fipscanister.o:(.text+0x34530): first defined
> > here
> > ../libcrypto.a(aes-x86_64.o): In function `asm_AES_cbc_encrypt':
> > (.text+0xfa0): multiple definition of `asm_AES_cbc_encrypt'
> > /usr/local/ssl/fips-2.0/lib//fipscanister.o:(.text+0x34ad0): first defined
> > here
> > 
> 
> Can you give details of how you compiled and installed the test 2.0 module,
> i.e. the commands you used?
> 

Looking at this a little further... those symbols don't exist in the 2.0
module. That would happen if you used HEAD instead of the fips-2.0 snapshots
to build fipscanister.o

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to