On Nov 1, 2011, at 4:23 PM, Dr. Stephen Henson wrote: > On Tue, Nov 01, 2011, Bill Durant wrote: > >> Hello, >> >> What is the procedure for building a FIPS-capable OpenSSL snapshot on Ubuntu >> 8.04.4 LTS from the following snapshots: >> > > >> ftp://ftp.openssl.org/snapshot/openssl-1.0.1-stable-SNAP-20111031.tar.gz >> >> ftp://ftp.openssl.org/snapshot/openssl-fips-2.0-test-20111031.tar.gz >> >> When I try to build it, I get the following compilation error: >> >> ====== >> In file included from hm_pmeth.c:64: >> ../evp/evp_locl.h:359:1: error: "SHA1_Init" redefined >> In file included from /tmp/foo/include/openssl/crypto.h:151, >> from ../cryptlib.h:72, >> from hm_pmeth.c:59: >> /tmp/foo/include/openssl/fipssyms.h:456:1: error: this is the location of >> the previous definition >> ====== >> >> $ ./config fipscanisterbuild no-asm >> ... >> ... >> Configured for linux-elf. >> > > Avoid no-asm: currently no one wants a C only platform so it wont be a > supported platform. It will be *much* slower.
OK > >> >> $ ./config fips --prefix=$FIPSDIR no-idea no-mdc2 no-rc5 no-asm >> ... >> ... >> Since you've disabled or enabled at least one algorithm, you need to do >> the following before building: >> >> make depend >> > > Don't do "make depend" it gets a bit confused. Just doing "make" should work > fine. > > Steve. When I skip doing 'make depend' and just do 'make' I get the following compilation error: gcc -I.. -I../.. -I../modes -I../asn1 -I../evp -I../../include -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -Wa,--noexecstack -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -I/tmp/foo/include -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM -DWHIRLPOOL_ASM -c -o e_bf.o e_bf.c make[2]: *** No rule to make target `../../include/openssl/idea.h', needed by `e_idea.o'. Stop. make[2]: Leaving directory `/home/bdurant/svn/trunk/Crypto/Linux/openssl-1.0.1-stable-SNAP-20111031/crypto/evp' make[1]: *** [subdirs] Error 1 make[1]: Leaving directory `/home/bdurant/svn/trunk/Crypto/Linux/openssl-1.0.1-stable-SNAP-20111031/crypto' make: *** [build_crypto] Error 1 What else am I missing? Thanks, Bill > -- > Dr Stephen N. Henson. OpenSSL project core developer. > Commercial tech support now available see: http://www.openssl.org > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
