On Wed, Jul 03, 2013, Zeke Evans wrote: > I built the FIPS module as specified in the User Guide (only using > ./config). The 'bn_mul_mont_fpu' multiply-defined error only occurs > when building the fips capable code when using the 'shared' option (I > only tested 1.0.1e and 1.0.1c). > > I don't think there is anything wrong with the FIPS module because I > am able to use it to build 1.0.1e with 'fips' but without 'shared' > being specified and all tests pass successfully. >
All symbols in the validated module should being fips_* or FIPS_* to avoid clashes but that one was overlooked. As a workaround I'd suggest renaming the symbol in the FIPS capable OpenSSL to something like ossl_bn_mul_mont_fpu. Make sure OpenSSL compiles *without* the fips option when you do that (to ensure you're using the correct symbol). Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
