Cross compiling openssl-fips-1.2 for arm-linux

[Jim . Rowe]

I'm trying to build openssl-fips-1.2 for an Arm XSCALE 255 running a debian-based linux filesystem. Build system is an x86-Knoppix machine.

I've applied the openssl-fips-1.2.crossbuild.patch as advised in the User Manual and Security Policy.

After setting $CROSS_COMPILE and $HOSTCC as needed, I am running into a problem during the build where fipsld is trying to generate a signature.

Here's the error:
make[2]: Entering directory
`/hda1/softw-local/uadmas/openssl/openssl-build/openssl-fips-1.2'
fips/fipsld: line 121: fips/../fips/fips_premain_dso: cannot execute binary
file



The file openssl-fips-1.2/fips/fipsld was patched with the following snippet to allow cross-compiling:

    # generate signature...
!   if [ -z "${FIPS_SIG}" ]; then
!       SIG=`"${THERE}/fips/fips_premain_dso" "${TARGET}"`
!   else
!       SIG=`"${FIPS_SIG}" -dso "${TARGET}"`
!   fi

Now I'm pretty sure that fips_premain_dso is the wrong path because it is built for the ARM target. I'm having trouble figuring out what $FIPS_SIG should be set to? Do I build an x86 version of fips_premain_dso and point $FIPS_SIG to it?

Thanks,
Jim

/*
Jim Rowe
*/

______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org