Hi,
I am trying to compile openssl 1.0.1c with fips 2.0.1 enabled on Redhat RHEL
6.3 64bit server. I first compiled fips 2.0.1 in the source tree directory:
# config
# make
# make install
I then tried to compile openssl 1.0.1c in the source tree directory per FIPS
user guide:
# ./config fips -fPIC --with-fipslibdir=/usr/local/ssl/fips-2.0/lib
At the end, I got a message:
---------------------------------------------------------------------------------
...
generating dummy tests (if needed)...
make[1]: Entering directory `/home/rc6/openssl-1.0.1c/test'
make[1]: Nothing to be done for `generate'.
make[1]: Leaving directory `/home/rc6/openssl-1.0.1c/test'
Since you've disabled or enabled at least one algorithm, you need to do
the following before building:
make depend
Configured for linux-x86_64.
----------------------------------------------------------------------------------
I then did the command followed above instruction.
# make depend
# make test
I got some error message:
----------------------------------------------------------------------------------
...
gcc -I. -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN
-DHAVE_DLFCN_H -fPIC -Wa,--noexecstack -m64 -DL_ENDIAN -DTERMIO -O3 -Wall
-DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5
-DOPENSSL_BN_ASM_GF2m -I/usr/local/ssl/fips-2.0/include -DSHA1_ASM -DSHA256_ASM
-DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM
-DGHASH_ASM -c -o x86_64cpuid.o x86_64cpuid.s
ar r ../libcrypto.a cryptlib.o mem.o mem_dbg.o cversion.o ex_data.o cpt_err.o
ebcdic.o uid.o o_time.o o_str.o o_dir.o o_fips.o o_init.o fips_ers.o
x86_64cpuid.o
ar: creating ../libcrypto.a
[ -z "/usr/local/ssl/fips-2.0/lib" ] || ar r ../libcrypto.a
/usr/local/ssl/fips-2.0/libfipscanister.o
ar: /usr/local/ssl/fips-2.0/libfipscanister.o: No such file or directory
make[3]: *** [../libcrypto.a] Error 1
make[3]: Leaving directory `/home/rc6/openssl-1.0.1c/crypto'
make[2]: *** [build_crypto] Error 1
make[2]: Leaving directory `/home/rc6/openssl-1.0.1c'
make[1]: *** [../libcrypto.a] Error 2
make[1]: Leaving directory `/home/rc6/openssl-1.0.1c/test'
make: *** [tests] Error 2
----------------------------------------------------------------------------------
Can anyone give me the correct procedure to compile openssl with fips enabled?
I can compile openssl no problem without fips enabled. Thanks.
Ryan Jiang
This message (including any attachments) is intended
solely for the specific individual(s) or entity(ies) named
above, and may contain legally privileged and
confidential information. If you are not the intended
recipient, please notify the sender immediately by
replying to this message and then delete it.
Any disclosure, copying, or distribution of this message,
or the taking of any action based on it, by other than the
intended recipient, is strictly prohibited.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
