Added the command line used and the error.

perl Configure VC-WIN32 no-asm fips no-ec 
--with-fipslibdir=C:\openssl_build\openssl-fips-1.2.4\out32dll

cl /Fotmp32dll\fips_premain.obj -Iinc32 -Itmp32dll /MD /Ox /O2 /Ob2 /W3 /WX 
/Gs0 /GF /Gy /nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN 
-DDSO_WIN32 -D_CRT_SECURE_NO_DEPRECATE -D_CRT_NONSTDC_NO_DEPRECATE 
-DOPENSSL_USE_APPLINK -I. /Fdout32dll -DOPENSSL_NO_CAMELLIA -DOPENSSL_NO_SEED 
-DOPENSSL_NO_RC5 -DOPENSSL_NO_MDC2 -DOPENSSL_NO_CMS -DOPENSSL_NO_JPAKE 
-DOPENSSL_NO_CAPIENG -DOPENSSL_NO_KRB5 -DOPENSSL_NO_EC -DOPENSSL_NO_ECDSA 
-DOPENSSL_NO_ECDH -DOPENSSL_FIPS -DOPENSSL_NO_DYNAMIC_ENGINE -D_WINDLL  -c 
C:\openssl_build\openssl-fips-1.2.4\out32dll/fips_premain.c
fips_premain.c
link /nologo /subsystem:console /opt:ref /dll /fixed /map /base:0xFB00000 
/out:out32dll\libeay32.dll /def:ms/LIBEAY32.def 
@C:\DOCUME~1\zhangp\LOCALS~1\Temp\1\nm8B4.tmp
LIBEAY32.def : error LNK2001: unresolved external symbol BN_consttime_swap

Please note the 3 -D for NO_EC are in the compiler options. 

-----Original Message-----
From: Zhang, Ping (Unisphere) 
Sent: Tuesday, June 10, 2014 11:54 AM
To: 'openssl-users@openssl.org'
Subject: RE: link error building openssl 0.9.8za with FIPS module 1.2.4

Thanks! Got a build with 0610's snapshot.
However rebuilt openssl0.9.8za with no-ec (not rebuild fips libs), still see 
the same error.
-DOPENSSL_NO_EC -DOPENSSL_NO_ECDSA -DOPENSSL_NO_ECDH

-----Original Message-----
From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] 
On Behalf Of Dr. Stephen Henson
Sent: Tuesday, June 10, 2014 10:54 AM
To: openssl-users@openssl.org
Subject: Re: link error building openssl 0.9.8za with FIPS module 1.2.4

On Tue, Jun 10, 2014, Zhang, Ping (Unisphere) wrote:

> In process upgrade openssl to 0.9.8za. When building with fips module 1.2.4 
> lib, failed with link error. The same process and fips 1.2.4 lib works with 
> 0.9.8y.
> 
> Compared the code difference with 0.9.8za and 0.9.8y, noticed 
> BN_consttime_swap() is used in 0.9.8za crypto/ec/ec2_mult.c.
> 
> perl Configure VC-WIN32 no-asm fips
> --with-fipslibdir=C:\openssl_build\openssl-fips-1.2.4\out32dll
> ms\do_ms
> nmake -f ms\ntdll.mak clean
> nmake -f ms\ntdll.mak
> 
> The error I got
>                     cl /Fotmp32dll\fips_premain_dso.obj 
> -DFINGERPRINT_PREMAIN_DSO_LOAD -Iinc32 -Itmp32dll /MD /Ox /O2 /Ob2 /W3 /WX 
> /Gs0 /GF /Gy /nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN 
> -DDSO_WIN32 -D_CRT_SECURE_NO_DEPRECATE -D_CRT_NONSTDC_NO_DEPRECATE 
> -DOPENSSL_USE_APPLINK -I. /Fdout32dll -DOPENSSL_NO_CAMELLIA -DOPENSSL_NO_SEED 
> -DOPENSSL_NO_RC5 -DOPENSSL_NO_MDC2 -DOPENSSL_NO_CMS -DOPENSSL_NO_JPAKE 
> -DOPENSSL_NO_CAPIENG -DOPENSSL_NO_KRB5 -DOPENSSL_FIPS 
> -DOPENSSL_NO_DYNAMIC_ENGINE -D_WINDLL  -c .\fips\fips_premain.c fips_premain.c
>                     link /nologo /subsystem:console /opt:ref 
> /out:out32dll\fips_premain_dso.exe 
> @C:\DOCUME~1\zhangp\LOCALS~1\Temp\1\nm419.tmp
>    Creating library out32dll\fips_premain_dso.lib and object 
> out32dll\fips_premain_dso.exp ec2_mult.obj : error LNK2019: unresolved 
> external symbol _BN_consttime_swap referenced in function 
> _ec_GF2m_montgomery_point_multiply
> out32dll\fips_premain_dso.exe : fatal error LNK1120: 1 unresolved 
> externals
> 
> Any recommendation on solutions?
> 

Fixed in the latest snapshots. This problem is mentioned in the release
notes:

        https://www.openssl.org/news/openssl-0.9.8-notes.html

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org 
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to