Steve: Sorry 'bout the "abundance of info" last night. I was trying to get out of here before midnight and did some quick cut-and-paste.
Before I rebuild with your Makefile suggestion, I need to clarify that I downloaded the HP C compiler package (60 day trial of complete product) because I was under the impression that the default openssl-fips-1.1.2 build with gcc results in invalid (32-bit) code per User Guide, Appendix E.1, "Compiler placement of read-only data". I knew that the bundled cc compiler is only useful for kernel builds, so, I thought the only alternative was using the HP C compiler. Clearly, I astray. It sounds like you have used gcc and presumably generated 64-bit code (ELF-64?) for PA-RISC2.0. Correct? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Steve Marquess Sent: Thursday, May 01, 2008 5:32 AM To: openssl-users@openssl.org Subject: Re: openssl-fips-1.1.2 "make install" fails in fips-1.0/Makefile for hpux64-ia64-cc HP-UX 11 Welling, Conrad Gerhart wrote: > Steve: > Well, I put the IA64 build on the back burner. I downloaded the trial HP C > compiler package and installed it on a HP-UX 11 PA-RISC2.0 platform on which > I have tried to build openssl-fips-1.1.2. I've hit a snag (actually, a few) > and spent a few days Googling and scouring hp.com for enlightenment, but, > haven't figure this out yet. As you (unwisely) mentioned that you built > openssl-fips-1.1.2 successfully on a PA-RISC2.0 box, it's clear I'm missing > something fundamental here. I had expected that building on a *nix platform > was going to be easier (for me) than building on Windows ... perhaps I was > brighter a year ago. Regardlesss, below, find two sections ... > > 1. Setup: Describes the platform configuration > 2. Output: Extracted portions of "make -p" > > .... <abundance of info snipped>... Hmmm ... you appended a *lot* of output, but it's not clear to me exactly what you're doing. I see you have multiple versions of perl, make, openssl, etc. installed but don't know what you're actually referencing. Could you provide a Makefile that drives your build beginning with the tarball? For reference here's one that I've used for HP-UX 11.11: FIPSPROD = openssl-fips-1.1.2.tar.gz FIPSDIR = openssl-fips-1.1.2 all: fips-build $(FIPSDIR): $(FIPSPROD) gunzip -c $(FIPSPROD) | tar xf - fips-build: $(FIPSDIR) export PATH=/usr/local/bin:$$PATH; \ cd $(FIPSDIR); \ ./config fips; \ make Note that /usr/local/ contains all the standard OSS products -- gcc, perl, make, binutils, etc. HP was a sponsor of the original (v1.1, which begat 1.1.1 and 1.1.2) validated product, and I've built those products many, many times on HP-UX 11.0 and 11.11. However, I rarely use the proprietary HP compilers at all, and never for OpenSSL; due to various issues encountered with bundled or optional HP-UX commands they have been replaced by their OSS equivalents in the HP-UX environment I have access to. Unfortunately I don't have the latitude at present to try this with the HP compiler and build tools. BTW the bundled "cc" is worthless for anything but kernel updates -- it's a non-ANSI compiler. I'm not familiar with the "trial HP C" compiler. There is an extra-cost optional compiler, on 250+ HP servers in my environment we have one copy, somewhere (haven't used it in several years and I'm not sure which system it's installed on, if any). Are you able to build a stock OpenSSL (say openssl-0.9.7m.tat.gz) using your build environment? -Steve M. -- Steve Marquess Open Source Software Institute [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
