[stunnel-users] OpenSSL FIPS header not found - version 5.02

James Brown jlbrown at bordo.com.au
Thu Jun 26 05:16:54 CEST 2014


Thanks Heaps for that.

Problems encountered listed below:

> On 26 Jun 2014, at 9:16 am, Hui Yu <hyu at Brocade.com> wrote:
> 
> You need to follow these steps:
> 1.1.1       Build openssl-fips package
> From https://www.openssl.org/source/, download latest openssl-fips package and unzip under 
> tar –zxvf openssl-fips-2.0.5.tar.gz
> cd /home/user/openssl-fips-2.0.5
> /Configure --prefix=/usr/local  linux-generic32
> make
> make install
>  
> 1.1.2       Build FIPS capable openssl package
> From https://www.openssl.org/source/, download latest openssl  package and unzip under 
> tar –zxvf openssl-1.0.1h.tar.gz 
> Cd /home/user/openssl-1.0.1h
> ./Configure --prefix=/usr/local --with-fipsdir=/usr/local  fips  linux-generic32

This ends with:

Since you've disabled or enabled at least one algorithm, you need to do
the following before building:

	make depend

Configured for linux-generic32.

> make CC=fipsld FIPSLD_CC=gcc -j 8

This gives me:

../include/openssl/bio.h:332: error: parameter name omitted
bntest.c:2013: error: expected ‘{’ at end of input
req.c: In function ‘do_sign_init’:
req.c:1799: error: ‘bio_err’ undeclared (first use in this function)
make[1]: *** [bntest.o] Error 1
make[1]: *** [req.o] Error 1
make: *** [build_tests] Error 1
make: *** [build_apps] Error 1
make: *** [build_ssl] Error 1

Any suggestions?

Thanks,

James.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20140626/76e9c744/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6614 bytes
Desc: not available
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20140626/76e9c744/attachment.bin>


More information about the stunnel-users mailing list