Re: Compiling openssl for linux-mipsel
I'm not sure how to take the question. It's a symbol that's normally found in libcrypto.so. It's a function that free's an RSA*. It's part of the support for RSA public key crypto, which undergirds most stuff you might want to do with OpenSSL. If this is the case, then I definately need to keep it as it is. I am trying to compile this for my router, with a third party firmware with OpenVPN. I've attempted to narrow RSA_free down in libssl.so and found two instances. I don't quite know where RSA_free belongs, it is just in the middle of a massive block of text with no beginning and no end... The first instance: ssl_check_serverhello_tlsext ssl3_comp_find EVP_PKEY_missing_parameters ssl_cert_type RSA_free tls1_ec_curve_id2nid EC_GROUP_new_by_curve_name EC_GROUP_free EC_KEY_set_public_key Second instance: SSL_get_ex_data_X509_STORE_CTX_idx ssl_undefined_function SSL_ctrl RSA_free d2i_DHparams dtls1_reset_seq_numbers SSL_get_ex_data stderr Back to the error: busybox/examples/depmod-t.pl -k /root/tomato/release/src/linux/linux/vmlinux -b /root/tomato/release/src/router/mipsel-uclibc/target/lib/modules/2.4.20/ --- Unable to resolve RSA_free used by libssl.so make[1]: *** [install] Error 1 make[1]: Leaving directory `/root/tomato/release/src/router' make: *** [all] Error 2 I don't understand why such an essential function would cause such an error. Which line of depmod-t.pl is causing this error is also a mystery at this point. -- Be Yourself @ mail.com! Choose From 200+ Email Addresses Get a Free Account at www.mail.com! __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
Compiling openssl for linux-mipsel
I am trying to cross compile openssl for a linux-mipsel system (my router running Tomato firmware), though the system type no longer exists in the ./Configure list. The router currently uses openssl 0.9.7d, and I'm trying to compile it with uClibC. Any suggestions or advice if this can be done? Thank you -- An Excellent Credit Score is 750 See Yours in Just 2 Easy Steps! at Freecreditreport.com __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
Re: Compiling openssl for linux-mipsel
I found MIPS compatibility patches (http://cblfs.cross-lfs.org/index.php/OpenSSL) since my last post though have run into problems after the compile process: Unable to resolve RSA_free used by libssl.so make[1]: *** [install]Error 1 What is RSA_free? I am trying to strip down openssl as much as possible, so if this is caused by something I don't need, I'll take it out. Thank you -- Be Yourself @ mail.com! Choose From 200+ Email Addresses Get a Free Account at www.mail.com! ---BeginMessage--- I am trying to cross compile openssl for a linux-mipsel system (my router running Tomato firmware), though the system type no longer exists in the ./Configure list. The router currently uses openssl 0.9.7d, and I'm trying to compile it with uClibC. Any suggestions or advice if this can be done? Thank you -- An Excellent Credit Score is 750 See Yours in Just 2 Easy Steps! at Freecreditreport.com ---End Message---
Re: Compiling openssl for linux-mipsel
On Wed, 2009-08-05 at 10:23 -0700, hdf sdesdh wrote: I found MIPS compatibility patches (http://cblfs.cross-lfs.org/index.php/OpenSSL) since my last post though have run into problems after the compile process: Unable to resolve RSA_free used by libssl.so make[1]: *** [install]Error 1 What is RSA_free? I'm not sure how to take the question. It's a symbol that's normally found in libcrypto.so. It's a function that free's an RSA*. It's part of the support for RSA public key crypto, which undergirds most stuff you might want to do with OpenSSL. Really, grep and find make it fairly easy to find stuff like this. There is some stuff that's wrapped up in macros and impossible to find, but RSA_free is out in the open. I am trying to strip down openssl as much as possible, so if this is caused by something I don't need, I'll take it out. Stripping OpenSSL is fraught with peril. To use an allusion from computing's past, it is a maze of twisty, turny passages, all different. Perhaps better, it is like a cross-linked polymer with inter-module connections in surprising places. It is fairly simple to eliminate big chunks of stuff by adding no-* arguments at configure time, although this does not seem to be very well tested. Beyond that, you're kind of shooting in the dark. You do need to understand the needs of your application in some detail in order to go very far with this. I've used tools built around gcc's --instrument-functions capability to help me understand what parts of libcrypto I actually use, for instance. Paul Allen __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
