On Tue, Nov 01, 2011, Bill Durant wrote:

> Hello,
> 
> What is the procedure for building a FIPS-capable OpenSSL snapshot on Ubuntu 
> 8.04.4 LTS from the following snapshots:
>       


>       ftp://ftp.openssl.org/snapshot/openssl-1.0.1-stable-SNAP-20111031.tar.gz
>       
>       ftp://ftp.openssl.org/snapshot/openssl-fips-2.0-test-20111031.tar.gz
> 
> When I try to build it,  I get the following compilation error:
> 
> ======
> In file included from hm_pmeth.c:64:
> ../evp/evp_locl.h:359:1: error: "SHA1_Init" redefined
> In file included from /tmp/foo/include/openssl/crypto.h:151,
>                  from ../cryptlib.h:72,
>                  from hm_pmeth.c:59:
> /tmp/foo/include/openssl/fipssyms.h:456:1: error: this is the location of the 
> previous definition
> ======
> 
> $ ./config fipscanisterbuild no-asm
> ...
> ...
> Configured for linux-elf.
> 

Avoid no-asm: currently no one wants a C only platform so it wont be a
supported platform. It will be *much* slower.

> 
> $ ./config fips --prefix=$FIPSDIR no-idea no-mdc2 no-rc5 no-asm
> ...
> ...
> Since you've disabled or enabled at least one algorithm, you need to do
> the following before building:
> 
>       make depend
> 

Don't do "make depend" it gets a bit confused. Just doing "make" should work
fine.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to