Out of the box OpenSSL 0.9.8j fails to install on SunOS 5.10 ( cp:
cannot access fipscanister.o). I found a mail in the archives about
this and applied the patch to disable FIPS (see below). However,
after doing that compilation fails because fips.h is missing:
cc -I. -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN
-DHAVE_DLFCN_H -xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa
-DB_ENDIAN -DBN_DIV2W -c o_init.c
cc: Warning: -xarch=v8plus is deprecated, use -m32 -xarch=sparc instead
make: Fatal error: Don't know how to make target `../include/openssl/fips.h'
Current working directory /home/ca/pd/security/openssl-0.9.8j+/crypto
*** Error code 1
make: Fatal error: Command failed for target `build_crypto'
That's because openssl/fips.h is listed as dependency in the Makefile.
What's the "correct" way to fix this? For now I "hacked" the Makefile
to ignore the result of the cp command.
PS: here's the patch that I found on the mailing list/in CVS:
diff -u -r openssl-0.9.8j/Configure openssl-0.9.8j+/Configure
--- openssl-0.9.8j/Configure Sun Dec 28 16:18:23 2008
+++ openssl-0.9.8j+/Configure Fri Feb 27 08:47:12 2009
@@ -1048,6 +1048,7 @@
print "\n";
}
+push @skip, "fips" unless $fips;
my $IsMK1MF=scalar grep /^$target$/,@MK1MF_Builds;
@@ -1443,6 +1444,7 @@
}
}
$sdirs = 0 unless /\\$/;
+ s/fips // if (/^DIRS=/ && !$fips);
s/^VERSION=.*/VERSION=$version/;
s/^MAJOR=.*/MAJOR=$major/;
s/^MINOR=.*/MINOR=$minor/;
diff -u -r openssl-0.9.8j/fips/Makefile openssl-0.9.8j+/fips/Makefile
--- openssl-0.9.8j/fips/Makefile Tue Sep 23 04:21:17 2008
+++ openssl-0.9.8j+/fips/Makefile Fri Feb 27 08:47:36 2009
@@ -179,8 +179,8 @@
chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i ); \
done;
@target=install; $(RECURSIVE_MAKE)
- @cp -p -f fipscanister.o fipscanister.o.sha1 fips_premain.c \
- fips_premain.c.sha1 \
+ @cp -p -f $(FIPSLIBDIR)fipscanister.o $(FIPSLIBDIR)fipscanister.o.sha1 \
+ $(FIPSLIBDIR)fips_premain.c $(FIPSLIBDIR)fips_premain.c.sha1 \
$(INSTALL_PREFIX)$(INSTALLTOP)/lib/; \
chmod 0444 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/fips*
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
