> While fips build on soalris, I am getting variour errors: > > Sun-Intel: > > FIPSLD_CC=gcc FIPSLD_LINK=g++ > /unixhome/upg/Unix/SunOS/i386/OpenSource/ssl-1.0.1h/bin/fipsld -fPIC > -shared -g -O2 -o libImpl.so.10.0.0 -lcrypto > Text relocation remains referenced > against symbol offset in file > fips_openssl_cpuid_setup 0x1 > /unixhome/upg/Unix/SunOS/i386/OpenSource/ssl-1.0.1h/bin/../lib/fipscanister.o > ld: fatal: relocations remain against allocatable but non-writable sections > collect2: ld returned 1 exit status > > after searching on net came to know that the option -fPIC should be used > to fix this error and is used to build fipscanister.o as well as for the > project where this is being used.
FIPS module version 2 is compiled with -fPIC unconditionally. So question is what is that about. I mean why did you need to do something? > Also read about using -Wl, -Bsymbolic, this removes above error, but > fails for many other symbols. Such as? Essentially -Bsymbolic is a must for FIPS code. > Sun-sparc: > > For the above same linking on sparc, I got following error: > 4280524028:error:25066067:DSO support routines:DLFCN_LOAD:could not load > the shared > library:dso_dlfcn.c:187:filename(./objs/SunOS-5.10-sparc-32/libImpl.so.10.0.0): > ld.so.1: fips_premain_dso: fatal: relocation error: file > ./objs/SunOS-5.10-sparc-32/libImpl.so.10.0.0: symbol > _ZNSt8__detail15_List_node_base7_M_hookEPS0_: referenced symbol not found > 4280524028:error:25070067:DSO support routines:DSO_load:could not load > the shared library:dso_lib.c:244: > make: *** [objs/SunOS-5.10-sparc-32/libImpl.so.10.0.0] Error 1 Looks like something for you to figure out, as the symbol in question can't be from FIPS module. It seems to be something from libstdc++, so question is if libImpl.so was linked with it and if so, why it can't be found at that moment. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
