CS,
Sorry for the delay in replying with this info. This is what I did to
get FIPS to compile and install on our Solaris 10 server (I installed
the OEM distribution of S10):
I installed the following binary packages from sunfreeware.sun.com:
GCC 3.4.6
Make-381
Libiconv-1.11
Indent-2.2.9
M4-1.4.7
Flex-2.5.33
Bison-2.3
Autoconf-2.60
Most of these packages are requirements for one or another package. In
addition, we need GNU "ld" and "ar" compiled and installed (the GNU "ar"
command is needed for the "make install" phase as Sun's "ar" fails). For
the GNU "ld" command I did the following from the binutils directory:
CC=gcc
export CC
./configure
make all-ld
make install-ld
The "./config fips" command was still picking up /usr/ccs/bin/ld instead
of /usr/local/bin/ld, so I renamed /usr/ccs/bin/ld then linked
/usr/local/bin/ld with /usr/ccs/bin/ld. Problem solved. Also, the "make
install" failed due to the "ar" command. I followed the binutils/README
directions for compiling the GNU "ar" command with no "ar" on the system
which worked. Then I copied the GNU "ar" to /usr/local/bin. Now the
"make install" works. With these packages installed I was able to
compile and install the FIPS module from scratch with no problems.
One last piece of advice, when trying to compile the OpenSSL 0.9.7m
package, the generated makefile had to be modified: I had to change
"march" to "mcpu" as the compiler didn't understand the "march" option.
Afterwards, the compilation and installation worked fine.
Good luck.
Ron
p.s. I hope I got everything as I'm reading over my chicken-scratch
notes.
________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of capstone
Sent: Wednesday, April 04, 2007 6:40 PM
To: openssl-users@openssl.org
Subject: RE: Fips - Solaris 10 error
Anyone have any insight as to what might be going on here?
________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of capstone
Sent: Monday, April 02, 2007 6:48 PM
To: openssl-users@openssl.org
Subject: Fips - Solaris 10 error
I am trying to compile FIPS 1.1.1 in a full root zone on Solaris 10.
This is not the global zone.
I have made sure that I am using gnu ld and that my gcc 3.4.6 was
compiled against the gnu ld libraries. But the build still seems to be
having trouble in the apps directory when I issue the make command. Here
is the error:
rm -f openssl
+ ../fips-1.0/fipsld -o openssl -DMONOLITH -I.. -I../include
-DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H
-DOPENSSL_NO_KRB5 -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W
openssl.o verify.o asn1pars.o req.o dgst.o dh.o dhparam.o enc.o passwd.o
gendh.o errstr.o ca.o pkcs7.o crl2p7.o crl.o rsa.o rsautl.o dsa.o
dsaparam.o x509.o genrsa.o gendsa.o s_server.o s_client.o speed.o
s_time.o apps.o s_cb.o s_socket.o app_rand.o version.o sess_id.o
ciphers.o nseq.o pkcs12.o pkcs8.o spkac.o smime.o rand.o engine.o ocsp.o
prime.o ../libssl.a ../libcrypto.a -lsocket -lnsl -ldl
make[1]: *** [openssl] Error 1
make[1]: Leaving directory `/users/fin23243/openssl-fips-1.1.1/apps'
make: *** [sub_all] Error 1
Any insight as to what might be causing this is appreciated.
CS
