OpenSSL FIPS portability

2006-04-11 Thread Brad House
The dladdr() function used in DSO_pathbyaddr within crypto/dso/dso_dlfcn.c is not a standard function, though quite a few OSs appear to have it. Those that specifically don't (that I've tested) are: AIX 4.3.3+ AIX 5.1 (though 5.2/5.3 may have it, though it may be Itanium only, not POWER).

Cathy A Olson/FL/FDMS/FDC is not available.

2006-04-11 Thread CathyA . Olson
I will be out of the office starting 04/11/2006 and will not return until 04/12/2006. I will be out of the office on Tuesday April 11, 2006. I will respond to your email when I return on Wednesday April 12, 2006. If this is a production issue, please call our 24/7 NSS/OCC number at 1 800 555 99

[openssl.org #1308] [PATCH] improving make dclean

2006-04-11 Thread Ulf Moeller via RT
Patch applied to trunk. __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTE

Re: OpenSSL FIPS portability

2006-04-11 Thread Ulf Möller
Brad House wrote: The dladdr() function used in DSO_pathbyaddr within crypto/dso/dso_dlfcn.c is not a standard function, though quite a few OSs appear to have it. Those that specifically don't (that I've tested) are: AIX 4.3.3+ AIX 5.1 (though 5.2/5.3 may have it, though it may be Itan

Re: OpenSSL FIPS portability

2006-04-11 Thread Brad House
Ulf Möller wrote: >> The dladdr() function used in DSO_pathbyaddr within >> crypto/dso/dso_dlfcn.c is not a standard function, though >> quite a few OSs appear to have it. Those that specifically >> don't (that I've tested) are: >> >> AIX 4.3.3+ >> AIX 5.1 (though 5.2/5.3 may have it, though it may

OpenSSL FIPS 1.0 AIX using GCC patches

2006-04-11 Thread Brad House
Ran into 3 problems, all of which are addressed here: 1) dladdr() does not exist in AIX4 or AIX5.1, but the DSO_pathbyaddr() function from crypto/dso/dso_dlfcn.c is not called from anywhere so it's dead code... Just #if'd it out. 2) The inline assembler in fips-1.0/fips_canister.c for P

[openssl.org #1309] [PATCH] a new Makefile target for creating html-docs

2006-04-11 Thread Ulf Moeller via RT
Patch applied. __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]

Re: OpenSSL FIPS portability

2006-04-11 Thread Ulf Möller
Brad House wrote: Well, the DSO_METHOD structure doesn't seem to have a place for the DSO_pathbyaddr, it's not referenced in there at all ... Though if it will be used in the future, it would be good not to have dladdr() as a requirement :) It does on the 0.9.9 tree, but DSO_pathbyaddr actua

[openssl.org #1312] [PATCH] add support for platforms BeOS R5 and BONE

2006-04-11 Thread Ulf Moeller via RT
Done. __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]

Re: OpenSSL FIPS 1.0 AIX using GCC patches

2006-04-11 Thread Dr. Stephen Henson
On Tue, Apr 11, 2006, Brad House wrote: > Ran into 3 problems, all of which are addressed here: > 2) The inline assembler in fips-1.0/fips_canister.c for >PPC doesn't work with GCC and AIX's assembler properly >(it creates an undefined symbol reference to '.', yeah > that's right a per

Re: OpenSSL FIPS 1.0 AIX using GCC patches

2006-04-11 Thread Brad House
> It is not only fips_canister.c which cannot be modified. *NOTHING* in the > fips-1.0 tarball can be modified without invalidating the certification. There > is a published hash for that tarball in the security policy and it is > effectively frozen. > > The possibility of including minor non-cryp