When compiling on Mac OS 10.7.5 using:
make -f Makefile.init makefiles \
CCARGS='-arch x86_64 -DUSE_TLS -DUSE_SASL_AUTH \
-DDEF_SERVER_SASL_TYPE=\"dovecot\" \
-DDEF_COMMAND_DIR=\"/usr/local/sbin\" \
-DDEF_CONFIG_DIR=\"/usr/local/etc/postfix\" \
-DDEF_DAEMON_DIR=\"/usr/local/libexec/postfix\" \
-DHAS_PCRE -I/usr/local/include \
-DHAS_SSL -I/usr/include/openssl \
-DHAS_MYSQL -I/usr/local/mysql/include' \
AUXLIBS='-L/usr/local/lib -llber -lresolv -L/usr/lib \
-L/usr/local/lib -lpcre -lssl -L/usr/local/mysql/lib \
-lmysqlclient -lz -lm'
It finishes with:
cc -I. -I../../include -arch x86_64 -DUSE_TLS -DUSE_SASL_AUTH
-DDEF_SERVER_SASL_TYPE=\"dovecot\" -DDEF_COMMAND_DIR=\"/usr/local/sbin\"
-DDEF_CONFIG_DIR=\"/usr/local/etc/postfix\"
-DDEF_DAEMON_DIR=\"/usr/local/libexec/postfix\" -DHAS_PCRE -I/usr/local/include
-DHAS_SSL -I/usr/include/openssl -DHAS_MYSQL -I/usr/local/mysql/include
-Wmissing-prototypes -Wformat -Wno-comment -DBIND_8_COMPAT -DNO_NETINFO
-DRESOLVE_H_NEEDS_ARPA_NAMESER_COMPAT_H -DNO_KQUEUE -g -O -I. -I../../include
-DMACOSX -o smtpd smtpd.o smtpd_token.o smtpd_check.o smtpd_chat.o
smtpd_state.o smtpd_peer.o smtpd_sasl_proto.o smtpd_sasl_glue.o smtpd_proxy.o
smtpd_xforward.o smtpd_dsn_fix.o smtpd_milter.o smtpd_resolve.o smtpd_expand.o
smtpd_haproxy.o ../../lib/libmaster.a ../../lib/libtls.a ../../lib/libdns.a
../../lib/libxsasl.a ../../lib/libmilter.a ../../lib/libdns.a
../../lib/libglobal.a ../../lib/libutil.a -L/usr/local/lib -llber -lresolv
-L/usr/lib -L/usr/local/lib -lpcre -lssl -L/usr/local/mysql/lib -lmysqlclient
-lz -lm -flat_namespace
Undefined symbols for architecture x86_64:
"_FIPS_md_ctx_create", referenced from:
_tls_serverid_digest in libtls.a(tls_fprint.o)
_tls_data_fprint in libtls.a(tls_fprint.o)
"_FIPS_digestinit", referenced from:
_tls_serverid_digest in libtls.a(tls_fprint.o)
_tls_data_fprint in libtls.a(tls_fprint.o)
"_FIPS_digestupdate", referenced from:
_tls_serverid_digest in libtls.a(tls_fprint.o)
_tls_data_fprint in libtls.a(tls_fprint.o)
"_FIPS_digestfinal", referenced from:
_tls_serverid_digest in libtls.a(tls_fprint.o)
_tls_data_fprint in libtls.a(tls_fprint.o)
"_FIPS_md_ctx_destroy", referenced from:
_tls_serverid_digest in libtls.a(tls_fprint.o)
_tls_data_fprint in libtls.a(tls_fprint.o)
"_FIPS_evp_sha224", referenced from:
_tls_validate_digest in libtls.a(tls_misc.o)
"_FIPS_evp_sha384", referenced from:
_tls_validate_digest in libtls.a(tls_misc.o)
"_FIPS_evp_sha512", referenced from:
_tls_validate_digest in libtls.a(tls_misc.o)
"_FIPS_bn_bin2bn", referenced from:
_tls_get_dh in libtls.a(tls_dh.o)
"_FIPS_ec_key_new_by_curve_name", referenced from:
_tls_set_eecdh_curve in libtls.a(tls_dh.o)
"_FIPS_bn_new", referenced from:
_tls_tmp_rsa_cb in libtls.a(tls_rsa.o)
"_fips_bn_set_word", referenced from:
_tls_tmp_rsa_cb in libtls.a(tls_rsa.o)
"_FIPS_rsa_generate_key_ex", referenced from:
_tls_tmp_rsa_cb in libtls.a(tls_rsa.o)
"_FIPS_bn_free", referenced from:
_tls_tmp_rsa_cb in libtls.a(tls_rsa.o)
"_FIPS_add_lock", referenced from:
_tls_verify_certificate_callback in libtls.a(tls_verify.o)
"_FIPS_free", referenced from:
_tls_text_name in libtls.a(tls_verify.o)
"_FIPS_evp_sha256", referenced from:
_ticket_cb in libtls.a(tls_server.o)
_tls_validate_digest in libtls.a(tls_misc.o)
"_FIPS_evp_aes_128_cbc", referenced from:
_ticket_cb in libtls.a(tls_server.o)
"_FIPS_rand_bytes", referenced from:
_ticket_cb in libtls.a(tls_server.o)
"_FIPS_hmac_init_ex", referenced from:
_ticket_cb in libtls.a(tls_server.o)
"_FIPS_rand_seed", referenced from:
_tls_int_seed in libtls.a(tls_seed.o)
_tls_ext_seed in libtls.a(tls_seed.o)
ld: symbol(s) not found for architecture x86_64
clang: error: linker command failed with exit code 1 (use -v to see invocation)
make: *** [smtpd] Error 1
make: *** [update] Error 1
I’m pretty sure I’ve installed OpenSSL-FIPS 2.0.5. Running OpenSSL 1.0.1h.
Searching for fips gives me:
locate fips
/usr/local/bin/fips_standalone_sha1
/usr/local/bin/fipsld
/usr/local/include/openssl/fips.h
/usr/local/include/openssl/fips_rand.h
/usr/local/include/openssl/fipssyms.h
/usr/local/lib/fips_premain.c
/usr/local/lib/fips_premain.c.sha1
/usr/local/lib/fipscanister.o
/usr/local/lib/fipscanister.o.sha1
Thanks,
James.
smime.p7s
Description: S/MIME cryptographic signature
