Hi,

for days now I have tried to build and install OpenSSL 1.0.1g on OS X
Mavericks (64 bit), but to no avail.
The goal is to include OpenSSL into an application package for OS X
10.6+; I’m not aiming to install it locally on my computer.

My build is controlled by JHBuild. It runs
./Configure --prefix=/Users/username/product/10.9/inst \
-L'/Users/username/product/10.9/inst/lib' zlib no-krb5 \
shared darwin64-x86_64-cc

and then
make -j3 -j 3

Whatever I do I end up with:
making all in crypto/cmac...
…
if [ -n "libcrypto.1.0.0.dylib libssl.1.0.0.dylib" ]; then \
        (cd ..; make -j3 libcrypto.1.0.0.dylib); \
    fi
make[2]: warning: -jN forced in submake: disabling jobserver mode.
[ -z "" ] || /Applications/Xcode.app/Contents/Developer/usr/bin/gcc
-fPIC -fno-common -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT
-DDSO_DLFCN -DHAVE_DLFCN_H -arch x86_64 -O3 -DL_ENDIAN -Wall
-DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5
-DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM
-DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -Iinclude
\
        -DFINGERPRINT_PREMAIN_DSO_LOAD -o fips_premain_dso  \
        fips_premain.c fipscanister.o \
        libcrypto.a -L/Users/username/product/10.9/inst/lib  -lz


I already read that FIPS 2.0 isn’t supported on OS X (64 bit), so
I wonder why ‚make‘ is trying to build  fips_premain_dso anyway.
Until now I tried:
- the no-dso option, but I end up with errors that some *.bad files
could not be found. Looking for them in the Makefiles reveals that some
DSO stuff is involved despite the no-dso option.
- to disable the ciphers where the error above occurred (no-cmac no-srp
no-ts no-pqueue no-cms no-krb5). But at the end I get compilation
errors about missing _cmac-symbols.
- building OpenSSL 0.9.8y (like that one installed on my Mac),
Openssl-fips 1.2.4 and OpenSSL-fips 2.0.5. They return other errors
that don’t help me at all.

Which preparations and options do I need to get it compiled on my system?

Thank you in advance,

Sven

PS: I already posted this question a few hours ago, but it didn't
appear on the list (perhaps because of an attachment). If it shows
up in the meantime, then sorry for the duplicate post.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to