OpenSSL 0.9.8j compilation/installation error on SunOS 5.10

classic Classic list List threaded Threaded
8 messages Options
Reply | Threaded
Open this post in threaded view
|

OpenSSL 0.9.8j compilation/installation error on SunOS 5.10

Claus Assmann
Out of the box OpenSSL 0.9.8j fails to install on SunOS 5.10 ( cp:
cannot access fipscanister.o).  I found a mail in the archives about
this and applied the patch to disable FIPS (see below). However,
after doing that compilation fails because fips.h is missing:

cc -I. -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W  -c  o_init.c
cc: Warning: -xarch=v8plus is deprecated, use -m32 -xarch=sparc instead
make: Fatal error: Don't know how to make target `../include/openssl/fips.h'
Current working directory /home/ca/pd/security/openssl-0.9.8j+/crypto
*** Error code 1
make: Fatal error: Command failed for target `build_crypto'

That's because openssl/fips.h is listed as dependency in the Makefile.

What's the "correct" way to fix this? For now I "hacked" the Makefile
to ignore the result of the cp command.


PS: here's the patch that I found on the mailing list/in CVS:
diff -u -r openssl-0.9.8j/Configure openssl-0.9.8j+/Configure
--- openssl-0.9.8j/Configure Sun Dec 28 16:18:23 2008
+++ openssl-0.9.8j+/Configure Fri Feb 27 08:47:12 2009
@@ -1048,6 +1048,7 @@
  print "\n";
  }
 
+push @skip, "fips" unless $fips;
 
 my $IsMK1MF=scalar grep /^$target$/,@MK1MF_Builds;
 
@@ -1443,6 +1444,7 @@
  }
  }
  $sdirs = 0 unless /\\$/;
+ s/fips // if (/^DIRS=/ && !$fips);
  s/^VERSION=.*/VERSION=$version/;
  s/^MAJOR=.*/MAJOR=$major/;
  s/^MINOR=.*/MINOR=$minor/;
diff -u -r openssl-0.9.8j/fips/Makefile openssl-0.9.8j+/fips/Makefile
--- openssl-0.9.8j/fips/Makefile Tue Sep 23 04:21:17 2008
+++ openssl-0.9.8j+/fips/Makefile Fri Feb 27 08:47:36 2009
@@ -179,8 +179,8 @@
  chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i ); \
  done;
  @target=install; $(RECURSIVE_MAKE)
- @cp -p -f fipscanister.o fipscanister.o.sha1 fips_premain.c \
- fips_premain.c.sha1 \
+ @cp -p -f $(FIPSLIBDIR)fipscanister.o $(FIPSLIBDIR)fipscanister.o.sha1 \
+ $(FIPSLIBDIR)fips_premain.c $(FIPSLIBDIR)fips_premain.c.sha1 \
  $(INSTALL_PREFIX)$(INSTALLTOP)/lib/; \
  chmod 0444 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/fips*
 
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: OpenSSL 0.9.8j compilation/installation error on SunOS 5.10

Victor Duchovni
On Mon, Mar 02, 2009 at 05:36:15PM -0800, Claus Assmann wrote:

> Out of the box OpenSSL 0.9.8j fails to install on SunOS 5.10 ( cp:
> cannot access fipscanister.o).  I found a mail in the archives about
> this and applied the patch to disable FIPS (see below). However,
> after doing that compilation fails because fips.h is missing:
>
> [ ... ]
>
> What's the "correct" way to fix this? For now I "hacked" the Makefile
> to ignore the result of the cp command.

For me the "correct" solution was to not even consider using 0.9.8j at
this time. It is IMNSHO not a "patch" release, rather a major feature
release, with a lot of new code that has been sufficiently stress-tested.

The fact that this release is also a critical security release, in my
opinion, highlights a significant deficiency in the OpenSSL release
process. There are no OpenSSL "patch" releases, there are only feature
releases, some with fewer new features, and some with more.

So, I back-ported the recent security patch and other miscellaneous fixes
to 0.9.8i instead. I won't be adopting the 0.9.8j+ releases until the
new FIPS code undergoes significant field testing.

You can check the CVS histories of the patched files to find the relevant
fixes these represent. I should have these handy, but I don't...

It should not be necessary for distribution maintainers to back-port
critical fixes while weeding out new OpenSSL features, but sadly this
is for now the situation we are in.

--
        Viktor.

security-patch (4K) Download Attachment
misc-patches (4K) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: OpenSSL 0.9.8j compilation/installation error on SunOS 5.10

karuppusamy g
In reply to this post by Claus Assmann
thank you.

On Mon, Mar 2, 2009 at 8:36 PM, Claus Assmann <[hidden email]> wrote:
Out of the box OpenSSL 0.9.8j fails to install on SunOS 5.10 ( cp:
cannot access fipscanister.o).  I found a mail in the archives about
this and applied the patch to disable FIPS (see below). However,
after doing that compilation fails because fips.h is missing:

cc -I. -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W  -c  o_init.c
cc: Warning: -xarch=v8plus is deprecated, use -m32 -xarch=sparc instead
make: Fatal error: Don't know how to make target `../include/openssl/fips.h'
Current working directory /home/ca/pd/security/openssl-0.9.8j+/crypto
*** Error code 1
make: Fatal error: Command failed for target `build_crypto'

That's because openssl/fips.h is listed as dependency in the Makefile.

What's the "correct" way to fix this? For now I "hacked" the Makefile
to ignore the result of the cp command.


PS: here's the patch that I found on the mailing list/in CVS:
diff -u -r openssl-0.9.8j/Configure openssl-0.9.8j+/Configure
--- openssl-0.9.8j/Configure    Sun Dec 28 16:18:23 2008
+++ openssl-0.9.8j+/Configure   Fri Feb 27 08:47:12 2009
@@ -1048,6 +1048,7 @@
       print "\n";
       }

+push @skip, "fips" unless $fips;

 my $IsMK1MF=scalar grep /^$target$/,@MK1MF_Builds;

@@ -1443,6 +1444,7 @@
                       }
               }
       $sdirs = 0 unless /\\$/;
+       s/fips // if (/^DIRS=/ && !$fips);
       s/^VERSION=.*/VERSION=$version/;
       s/^MAJOR=.*/MAJOR=$major/;
       s/^MINOR=.*/MINOR=$minor/;
diff -u -r openssl-0.9.8j/fips/Makefile openssl-0.9.8j+/fips/Makefile
--- openssl-0.9.8j/fips/Makefile        Tue Sep 23 04:21:17 2008
+++ openssl-0.9.8j+/fips/Makefile       Fri Feb 27 08:47:36 2009
@@ -179,8 +179,8 @@
       chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i ); \
       done;
       @target=install; $(RECURSIVE_MAKE)
-       @cp -p -f fipscanister.o fipscanister.o.sha1 fips_premain.c \
-               fips_premain.c.sha1 \
+       @cp -p -f $(FIPSLIBDIR)fipscanister.o $(FIPSLIBDIR)fipscanister.o.sha1 \
+               $(FIPSLIBDIR)fips_premain.c $(FIPSLIBDIR)fips_premain.c.sha1 \
               $(INSTALL_PREFIX)$(INSTALLTOP)/lib/; \
       chmod 0444 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/fips*

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: OpenSSL 0.9.8j compilation/installation error on SunOS 5.10

Dr. Stephen Henson
In reply to this post by Claus Assmann
On Mon, Mar 02, 2009, Claus Assmann wrote:

> Out of the box OpenSSL 0.9.8j fails to install on SunOS 5.10 ( cp:
> cannot access fipscanister.o).  I found a mail in the archives about
> this and applied the patch to disable FIPS (see below). However,
> after doing that compilation fails because fips.h is missing:
>
> cc -I. -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W  -c  o_init.c
> cc: Warning: -xarch=v8plus is deprecated, use -m32 -xarch=sparc instead
> make: Fatal error: Don't know how to make target `../include/openssl/fips.h'
> Current working directory /home/ca/pd/security/openssl-0.9.8j+/crypto
> *** Error code 1
> make: Fatal error: Command failed for target `build_crypto'
>
> That's because openssl/fips.h is listed as dependency in the Makefile.
>
> What's the "correct" way to fix this? For now I "hacked" the Makefile
> to ignore the result of the cp command.
>

Please try a recent 0.9.8 snapshot, for example:

ftp://ftp.openssl.org/snapshot/openssl-0.9.8-stable-SNAP-20090303.tar.gz

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: OpenSSL 0.9.8j compilation/installation error on SunOS 5.10

Claus Assmann
On Tue, Mar 03, 2009, Dr. Stephen Henson wrote:
> On Mon, Mar 02, 2009, Claus Assmann wrote:

> > Out of the box OpenSSL 0.9.8j fails to install on SunOS 5.10 ( cp:
> > cannot access fipscanister.o).  I found a mail in the archives about

> Please try a recent 0.9.8 snapshot, for example:

> ftp://ftp.openssl.org/snapshot/openssl-0.9.8-stable-SNAP-20090303.tar.gz

Fails in a different way:

if [ -z "" ]; then \
        @set -e; target=links; dir=fips ; if [ -d "$dir" ]; then  (     [ $target != all -a -z "" ] && FIPSCANLIB=/dev/null;  cd $dir && echo "making $target in $dir..." &&  TOP= && unset TOP ${LIB+LIB} ${LIBS+LIBS}  ${INCLUDE+INCLUDE} ${INCLUDES+INCLUDES}         ${DIR+DIR} ${DIRS+DIRS} ${SRC+SRC}              ${LIBSRC+LIBSRC} ${LIBOBJ+LIBOBJ} ${ALL+ALL}    ${EXHEADER+EXHEADER} ${HEADER+HEADER}           ${GENERAL+GENERAL} ${CFLAGS+CFLAGS}             ${ASFLAGS+ASFLAGS} ${AFLAGS+AFLAGS}             ${LDCMD+LDCMD} ${LDFLAGS+LDFLAGS}               ${SHAREDCMD+SHAREDCMD} ${SHAREDFLAGS+SHAREDFLAGS}       ${SHARED_LIB+SHARED_LIB} ${LIBEXTRAS+LIBEXTRAS} && make -e PLATFORM='solaris-sparcv9-cc' PROCESSOR=''  CC='cc' CFLAG='-DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W'                        AS='cc' ASFLAG='-DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W -c'                   AR='ar  r' PERL='/usr/bin/perl' RANLIB='/usr/ccs/bin/ranlib'    SDIRS='objects  md2 md4 md5 sha hmac ripemd  des aes rc2 rc4 idea bf cast  bn ec rsa dsa ecdsa dh ecdh dso engine  buffer bio stack lhash rand err  evp asn1 pem x509 x509v3 conf txt_db pkcs7 pkcs12 comp ocsp ui krb5  store pqueue' LIBRPATH='/var/tmp/openssl/lib'  INSTALL_PREFIX=''               INSTALLTOP='/var/tmp/openssl' OPENSSLDIR='/var/tmp/openssl/ssl'         MAKEDEPEND='$${TOP}/util/domd $${TOP} -MD makedepend'  DEPFLAG='-DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_CAMELLIA -DOPENSSL_NO_CAPIENG -DOPENSSL_NO_CMS -DOPENSSL_NO_GMP -DOPENSSL_NO_JPAKE -DOPENSSL_NO_MDC2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_RFC3779 -DOPENSSL_NO_SEED'      MAKEDEPPROG='makedepend'                        SHARED_LDFLAGS='-G -dy -z text'                 KRB5_INCLUDES='' LIBKRB5=''     EXE_EXT='' SHARED_LIBS=''       SHLIB_EXT='.so.0.9.8' SHLIB_TARGET='solaris-shared'     PEX_LIBS='' EX_LIBS='-lsocket -lnsl -ldl'       CPUID_OBJ=''                    BN_ASM='sparcv8plus.o' DES_ENC='des_enc-sparc.o fcrypt_b.o'     AES_ASM_OBJ='aes_core.o aes_cbc.o'                      BF_ENC='bf_enc.o' CAST_ENC='c_enc.o'    RC4_ENC='rc4_enc.o rc4_skey.o' RC5_ENC='rc5_enc.o'      SHA1_ASM_OBJ=''                         MD5_ASM_OBJ=''                  RMD160_ASM_OBJ=''               FIPSLIBDIR='/usr/local/ssl/fips-1.0/lib/'                       FIPSCANLIB="${FIPSCANLIB:-}"    FIPSCANISTERINTERNAL='n'        FIPS_EX_OBJ='../crypto/aes/aes_cfb.o  ../crypto/aes/aes_ecb.o  ../crypto/aes/aes_ofb.o  ../crypto/bn/bn_add.o  ../crypto/bn/bn_blind.o  ../crypto/bn/bn_ctx.o  ../crypto/bn/bn_div.o  ../crypto/bn/bn_exp2.o  ../crypto/bn/bn_exp.o  ../crypto/bn/bn_gcd.o  ../crypto/bn/bn_lib.o  ../crypto/bn/bn_mod.o  ../crypto/bn/bn_mont.o  ../crypto/bn/bn_mul.o  ../crypto/bn/bn_prime.o  ../crypto/bn/bn_rand.o  ../crypto/bn/bn_recp.o  ../crypto/bn/bn_shift.o  ../crypto/bn/bn_sqr.o  ../crypto/bn/bn_word.o  ../crypto/bn/bn_x931p.o  ../crypto/buffer/buf_str.o  ../crypto/cryptlib.o  ../crypto/des/cfb64ede.o  ../crypto/des/cfb64enc.o  ../crypto/des/cfb_enc.o  ../crypto/des/ecb3_enc.o  ../crypto/des/ecb_enc.o  ../crypto/des/ofb64ede.o  ../crypto/des/ofb64enc.o  ../crypto/des/fcrypt.o  ../crypto/des/set_key.o  ../crypto/dsa/dsa_utl.o  ../crypto/dsa/dsa_sign.o  ../crypto/dsa/dsa_vrf.o  ../crypto/err/err.o  ../crypto/evp/digest.o  ../crypto/evp/enc_min.o  ../crypto/evp/e_aes.o  ../crypto/evp/e_des3.o  ../crypto/evp/p_sign.o  ../crypto/evp/p_verify.o  ../crypto/mem_clr.o  ../crypto/mem.o  ../crypto/rand/md_rand.o  ../crypto/rand/rand_egd.o  ../crypto/rand/randfile.o  ../crypto/rand/rand_lib.o  ../crypto/rand/rand_os2.o  ../crypto/rand/rand_unix.o  ../crypto/rand/rand_win.o  ../crypto/rsa/rsa_lib.o  ../crypto/rsa/rsa_none.o  ../crypto/rsa/rsa_oaep.o  ../crypto/rsa/rsa_pk1.o  ../crypto/rsa/rsa_pss.o  ../crypto/rsa/rsa_ssl.o  ../crypto/rsa/rsa_x931.o  ../crypto/sha/sha1dgst.o  ../crypto/sha/sha256.o  ../crypto/sha/sha512.o  ../crypto/uid.o'    THIS=${THIS:-links} MAKEFILE=Makefile MAKEOVERRIDES= TOP=.. DIR=$dir $target  ) || exit 1;  fi ; \
fi
sh: @set: not found
*** Error code 1
make: Fatal error: Command failed for target `links'

If I fix the Makefile (remove @ from set inside a sh command, see
below), then I get the well-known error about missing fips.h:

cc -I. -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W  -c  o_init.c
cc: Warning: -xarch=v8plus is deprecated, use -m32 -xarch=sparc instead
make: Fatal error: Don't know how to make target `../include/openssl/fips.h'


PS: patch for Makefile:

--- M Tue Mar  3 13:31:48 2009
+++ Makefile Tue Mar  3 13:31:50 2009
@@ -506,8 +506,8 @@
  @$(PERL) $(TOP)/util/mkdir-p.pl include/openssl
  @$(PERL) $(TOP)/util/mklink.pl include/openssl $(EXHEADER)
  @set -e; target=links; $(RECURSIVE_BUILD_CMD)
- if [ -z "$(FIPSCANLIB)" ]; then \
- @set -e; target=links; dir=fips ; $(BUILD_CMD) ; \
+ @if [ -z "$(FIPSCANLIB)" ]; then \
+ set -e; target=links; dir=fips ; $(BUILD_CMD) ; \
  fi
 
 gentests:

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: OpenSSL 0.9.8j compilation/installation error on SunOS 5.10

Dr. Stephen Henson
On Tue, Mar 03, 2009, Claus Assmann wrote:

> On Tue, Mar 03, 2009, Dr. Stephen Henson wrote:
> > On Mon, Mar 02, 2009, Claus Assmann wrote:
>
> > > Out of the box OpenSSL 0.9.8j fails to install on SunOS 5.10 ( cp:
> > > cannot access fipscanister.o).  I found a mail in the archives about
>
> > Please try a recent 0.9.8 snapshot, for example:
>
> > ftp://ftp.openssl.org/snapshot/openssl-0.9.8-stable-SNAP-20090303.tar.gz
>
> Fails in a different way:
>
> if [ -z "" ]; then \
>         @set -e; target=links; dir=fips ; if [ -d "$dir" ]; then  (     [ $target != all -a -z "" ] && FIPSCANLIB=/dev/null;  cd $dir && echo "making $target in $dir..." &&  TOP= && unset TOP ${LIB+LIB} ${LIBS+LIBS}  ${INCLUDE+INCLUDE} ${INCLUDES+INCLUDES}         ${DIR+DIR} ${DIRS+DIRS} ${SRC+SRC}              ${LIBSRC+LIBSRC} ${LIBOBJ+LIBOBJ} ${ALL+ALL}    ${EXHEADER+EXHEADER} ${HEADER+HEADER}           ${GENERAL+GENERAL} ${CFLAGS+CFLAGS}             ${ASFLAGS+ASFLAGS} ${AFLAGS+AFLAGS}             ${LDCMD+LDCMD} ${LDFLAGS+LDFLAGS}               ${SHAREDCMD+SHAREDCMD} ${SHAREDFLAGS+SHAREDFLAGS}       ${SHARED_LIB+SHARED_LIB} ${LIBEXTRAS+LIBEXTRAS} && make -e PLATFORM='solaris-sparcv9-cc' PROCESSOR=''  CC='cc' CFLAG='-DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W'                        AS='cc' ASFLAG='-DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W -c'                   AR='ar  r' PERL='/usr/bin/perl' RANLIB='/usr/ccs/bin/ranlib'    SDIRS='objects  md2 md4 md5 sha hmac ripemd  des aes rc2 rc4 idea bf cast  bn ec rsa dsa ecdsa dh ecdh dso engine  buffer bio stack lhash rand err  evp asn1 pem x509 x509v3 conf txt_db pkcs7 pkcs12 comp ocsp ui krb5  store pqueue' LIBRPATH='/var/tmp/openssl/lib'  INSTALL_PREFIX=''               INSTALLTOP='/var/tmp/openssl' OPENSSLDIR='/var/tmp/openssl/ssl'         MAKEDEPEND='$${TOP}/util/domd $${TOP} -MD makedepend'  DEPFLAG='-DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_CAMELLIA -DOPENSSL_NO_CAPIENG -DOPENSSL_NO_CMS -DOPENSSL_NO_GMP -DOPENSSL_NO_JPAKE -DOPENSSL_NO_MDC2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_RFC3779 -DOPENSSL_NO_SEED'      MAKEDEPPROG='makedepend'                        SHARED_LDFLAGS='-G -dy -z text'                 KRB5_INCLUDES='' LIBKRB5=''     EXE_EXT='' SHARED_LIBS=''       SHLIB_EXT='.so.0.9.8' SHLIB_TARGET='solaris-shared'     PEX_LIBS='' EX_LIBS='-lsocket -lnsl -ldl'       CPUID_OBJ=''                    BN_ASM='sparcv8plus.o' DES_ENC='des_enc-sparc.o fcrypt_b.o'     AES_ASM_OBJ='aes_core.o aes_cbc.o'                      BF_ENC='bf_enc.o' CAST_ENC='c_enc.o'    RC4_ENC='rc4_enc.o rc4_skey.o' RC5_ENC='rc5_enc.o'      SHA1_ASM_OBJ=''                         MD5_ASM_OBJ=''                  RMD160_ASM_OBJ=''               FIPSLIBDIR='/usr/local/ssl/fips-1.0/lib/'                       FIPSCANLIB="${FIPSCANLIB:-}"    FIPSCANISTERINTERNAL='n'        FIPS_EX_OBJ='../crypto/aes/aes_cfb.o  ../crypto/aes/aes_ecb.o  ../crypto/aes/aes_ofb.o  ../crypto/bn/bn_add.o  ../crypto/bn/bn_blind.o  ../crypto/bn/bn_ctx.o  ../crypto/bn/bn_div.o  ../crypto/bn/bn_exp2.o  ../crypto/bn/bn_exp.o  ../crypto/bn/bn_gcd.o  ../crypto/bn/bn_lib.o  ../crypto/bn/bn_mod.o  ../crypto/bn/bn_mont.o  ../crypto/bn/bn_mul.o  ../crypto/bn/bn_prime.o  ../crypto/bn/bn_rand.o  ../crypto/bn/bn_recp.o  ../crypto/bn/bn_shift.o  ../crypto/bn/bn_sqr.o  ../crypto/bn/bn_word.o  ../crypto/bn/bn_x931p.o  ../crypto/buffer/buf_str.o  ../crypto/cryptlib.o  ../crypto/des/cfb64ede.o  ../crypto/des/cfb64enc.o  ../crypto/des/cfb_enc.o  ../crypto/des/ecb3_enc.o  ../crypto/des/ecb_enc.o  ../crypto/des/ofb64ede.o  ../crypto/des/ofb64enc.o  ../crypto/des/fcrypt.o  ../crypto/des/set_key.o  ../crypto/dsa/dsa_utl.o  ../crypto/dsa/dsa_sign.o  ../crypto/dsa/dsa_vrf.o  ../crypto/err/err.o  ../crypto/evp/digest.o  ../crypto/evp/enc_min.o  ../crypto/evp/e_aes.o  ../crypto/evp/e_des3.o  ../crypto/evp/p_sign.o  ../crypto/evp/p_verify.o  ../crypto/mem_clr.o  ../crypto/mem.o  ../crypto/rand/md_rand.o  ../crypto/rand/rand_egd.o  ../crypto/rand/randfile.o  ../crypto/rand/rand_lib.o  ../crypto/rand/rand_os2.o  ../crypto/rand/rand_unix.o  ../crypto/rand/rand_win.o  ../crypto/rsa/rsa_lib.o  ../crypto/rsa/rsa_none.o  ../crypto/rsa/rsa_oaep.o  ../crypto/rsa/rsa_pk1.o  ../crypto/rsa/rsa_pss.o  ../crypto/rsa/rsa_ssl.o  ../crypto/rsa/rsa_x931.o  ../crypto/sha/sha1dgst.o  ../crypto/sha/sha256.o  ../crypto/sha/sha512.o  ../crypto/uid.o'    THIS=${THIS:-links} MAKEFILE=Makefile MAKEOVERRIDES= TOP=.. DIR=$dir $target  ) || exit 1;  fi ; \
> fi
> sh: @set: not found
> *** Error code 1
> make: Fatal error: Command failed for target `links'
>
> If I fix the Makefile (remove @ from set inside a sh command, see
> below), then I get the well-known error about missing fips.h:
>
> cc -I. -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W  -c  o_init.c
> cc: Warning: -xarch=v8plus is deprecated, use -m32 -xarch=sparc instead
> make: Fatal error: Don't know how to make target `../include/openssl/fips.h'
>
>
> PS: patch for Makefile:
>
> --- M Tue Mar  3 13:31:48 2009
> +++ Makefile Tue Mar  3 13:31:50 2009
> @@ -506,8 +506,8 @@
>   @$(PERL) $(TOP)/util/mkdir-p.pl include/openssl
>   @$(PERL) $(TOP)/util/mklink.pl include/openssl $(EXHEADER)
>   @set -e; target=links; $(RECURSIVE_BUILD_CMD)
> - if [ -z "$(FIPSCANLIB)" ]; then \
> - @set -e; target=links; dir=fips ; $(BUILD_CMD) ; \
> + @if [ -z "$(FIPSCANLIB)" ]; then \
> + set -e; target=links; dir=fips ; $(BUILD_CMD) ; \
>   fi
>  
>  gentests:
>

Ooops, I've fixed that. Either try the next snapshot or make the same fix to
Makefile.org and run config again.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: OpenSSL 0.9.8j compilation/installation error on SunOS 5.10

Claus Assmann
On Tue, Mar 03, 2009, Dr. Stephen Henson wrote:
> On Tue, Mar 03, 2009, Claus Assmann wrote:
> > On Tue, Mar 03, 2009, Dr. Stephen Henson wrote:

> > > Please try a recent 0.9.8 snapshot, for example:

> > Fails in a different way:

> > PS: patch for Makefile:

> > --- M Tue Mar  3 13:31:48 2009
> > +++ Makefile Tue Mar  3 13:31:50 2009
> > @@ -506,8 +506,8 @@
> >   @$(PERL) $(TOP)/util/mkdir-p.pl include/openssl
> >   @$(PERL) $(TOP)/util/mklink.pl include/openssl $(EXHEADER)
> >   @set -e; target=links; $(RECURSIVE_BUILD_CMD)
> > - if [ -z "$(FIPSCANLIB)" ]; then \
> > - @set -e; target=links; dir=fips ; $(BUILD_CMD) ; \
> > + @if [ -z "$(FIPSCANLIB)" ]; then \
> > + set -e; target=links; dir=fips ; $(BUILD_CMD) ; \
> >   fi
> >  
> >  gentests:

> Ooops, I've fixed that. Either try the next snapshot or make the same fix to
> Makefile.org and run config again.


Thanks, that worked.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: OpenSSL 0.9.8j compilation/installation error on SunOS 5.10

Claus Assmann
In reply to this post by Victor Duchovni
On Mon, Mar 02, 2009, Victor Duchovni wrote:
> On Mon, Mar 02, 2009 at 05:36:15PM -0800, Claus Assmann wrote:

> > Out of the box OpenSSL 0.9.8j fails to install on SunOS 5.10 ( cp:

> > What's the "correct" way to fix this? For now I "hacked" the Makefile
> > to ignore the result of the cp command.

> For me the "correct" solution was to not even consider using 0.9.8j at
> this time. It is IMNSHO not a "patch" release, rather a major feature
> release, with a lot of new code that has been sufficiently stress-tested.

> So, I back-ported the recent security patch and other miscellaneous fixes
> to 0.9.8i instead. I won't be adopting the 0.9.8j+ releases until the
> new FIPS code undergoes significant field testing.

Thanks for the patches. My OpenSSL version is based on 0.9.8e to
which I added all security patches (I've checked your list and all
of those are in my version too) but now I finally wanted to be
"up-to-date" to avoid having to roll my own patches (and getting
complaints from users that my version isn't "secure" because it has
an older version number). Unfortunately it isn't as simple as it
should have been.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]