I built the FIPS module as specified in the User Guide (only using ./config). The 'bn_mul_mont_fpu' multiply-defined error only occurs when building the fips capable code when using the 'shared' option (I only tested 1.0.1e and 1.0.1c).
I don't think there is anything wrong with the FIPS module because I am able to use it to build 1.0.1e with 'fips' but without 'shared' being specified and all tests pass successfully. On Wed, Jul 3, 2013 at 4:50 PM, Porter, Andrew <andrew_por...@bmc.com> wrote: > From the User Guide for the OpenSSL FIPS Object Module v2.0, section 3.2: > > "note the ./config 'shared' option is forbidden by the terms of the > validation when building a FIPS validated module, but the fipscanister.o > object module can be used in a shared library." > > -----Original Message----- > From: owner-openssl-us...@openssl.org > [mailto:owner-openssl-us...@openssl.org] On Behalf Of Zeke Evans > Sent: Wednesday, July 03, 2013 4:29 PM > To: openssl-users@openssl.org > Subject: bn_mul_mont_fpu multiply-defined error > > I get an error building a fips capable shared object on sparc64. > > ./config fips shared > make depend > make > > ld: fatal: symbol 'bn_mul_mont_fpu' is multiply-defined: > (file /usr/local/ssl/fips-2.0/lib//fipscanister.o type=FUNC; file > libcrypto.a(sparcv9a-mont.o) type=FUNC); > ld: fatal: file processing errors. No output written to libcrypto.so.1.0.0 > make[4]: *** [link_a.solaris] Error 1 > > There are no errors if I build without the shared option. Is that not > supported? > > Thanks, > Zeke > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
