don't know, we were using stunnel 4.52 and openssl 1.0.0.the goal is to use stunnel 5.0. right now i'm at the point, even if i move to stunnel 4.53, it starts crashing even without any arguments.it should just print the help message, has nothing to do with openssl. thanks for your reply ! CC: [email protected] From: [email protected] Subject: Re: [stunnel-users] core dump when running stunnel on Arm based board Date: Sun, 16 Dec 2012 12:08:09 +0100 To: [email protected] Hi, just a question : do you have an openssl lib matching your target platform ?with proper include files and libs accessible at compile time and run time ?Pierre Le 16 déc. 2012 à 04:24, ning ji <[email protected]> a écrit : actually problem starts from 4.53. 1. build and run 4.52 is fine2. 4.53 crashes3. setup gdb, as long as i connect to target, it says cannot access memory 0. after i set breakpoint at main() in stunnel.c, it get seg fault signal when i hit "continue" in gdb. panic ... From: [email protected] To: [email protected] Date: Sat, 15 Dec 2012 15:43:09 +0000 Subject: [stunnel-users] core dump when running stunnel on Arm based board Hi everyone, i'm new to this. got a task to update stunnel from 4.52 to 5.00b1. 1. ./configure --host arm-none-linux-gnueabi --target arm-none-linux-gnueabi --prefix= i compared the makefile with the one in our 4.52 code base, same. 2. build with make -C stunnel CROSS_COMPILE=arm-none-linux-gnueabi- ARCH=arm 3. scp to ARM board, run without arugments, core dump. (the line number might be different as i was putting printfs. but as long as it enters parse_commandline, it crashes) [New LWP 867]Cannot access memory at address 0x70797263(gdb) bt#0 parse_commandline (name=0xbefdce29 "/opt/ultra/config/stunnel.conf", parameter=0xbefdce48 "-version") at options.c:1940#1 0x0003ba04 in main_configure (arg1=0xbefdce29 "/opt/ultra/config/stunnel.conf", arg2=0xbefdce48 "-version") at stunnel.c:199#2 0x0003bd44 in main_unix (argv=<optimized out>, argc=<optimized out>)at stunnel.c:135#3 main (argc=3, argv=0xbefdcd24) at stunnel.c:110my question is, it crashed when just entering parse_commandline( ),the 2 arguments look fine to me.How could this happen ?Many thanks ! _______________________________________________ stunnel-users mailing list [email protected] https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users _______________________________________________ stunnel-users mailing list [email protected] https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

hi, adapt the compilation scripts to your openssl inc and lib path... include for openssl are usually in : /somepath/include or inc32 I recommend you try to compile openssl for your target platform. Pierre Le 19 déc. 2012 à 23:28, ning ji <[email protected]> a écrit :

Hi guys,

1. i downloaded openssl 1.0.1c, stunnel-5.0.0b3 2. for stunnel, i turn on fips, ./configure --host=arm-none-linux-gnueabi --target=arm-none-linux-gnueabi --enable-fips --prefix= 3. when build, it failed to find openssl/fips.h 4. no fips.h in openssl, stunnel folder

can anyone give me a hint ?

thanks very much !

_______________________________________________ stunnel-users mailing list [email protected] https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

Fips is not in openssl by default, it is a kind of separate module check this page : http://www.openssl.org//docs/fips/fipsnotes.html and this doc to compile fips for openssl : http://www.openssl.org//docs/fips/UserGuide.pdf Pierre Le 19/12/2012 23:59, ning ji a écrit :

Hi Pierre,

this is exactly my question, under openssl, i don't see fips.h.

ningji@BOS2MSTEVENS01:~/openssl-1.0.1c$ find . -name "*fip*" ./crypto/fips_ers.o ./crypto/fips_ers.c ./crypto/o_fips.c ./crypto/fips_err.h ./crypto/o_fips.o ./crypto/evp/evp_fips.o ./crypto/evp/evp_fips.c ./crypto/dsa/fips186a.txt ./test/testfipsssl

any idea ? thanks !

------------------------------------------------------------------------ CC: [email protected] From: [email protected] Subject: Re: [stunnel-users] cannot find openssl/fips.h Date: Wed, 19 Dec 2012 23:55:32 +0100 To: [email protected]

hi, adapt the compilation scripts to your openssl inc and lib path... include for openssl are usually in : /somepath/include or inc32

I recommend you try to compile openssl for your target platform.

Pierre

Le 19 déc. 2012 à 23:28, ning ji <[email protected] <mailto:[email protected]>> a écrit :

Hi guys,

1. i downloaded openssl 1.0.1c, stunnel-5.0.0b3

2. for stunnel, i turn on fips,

./configure --host=arm-none-linux-gnueabi --target=arm-none-linux-gnueabi --enable-fips --prefix=

3. when build, it failed to find openssl/fips.h 4. no fips.h in openssl, stunnel folder

can anyone give me a hint ?

thanks very much !

_______________________________________________ stunnel-users mailing list [email protected] <mailto:[email protected]> https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

make sense now, thanks a lot !

Subject: Re: [stunnel-users] cannot find openssl/fips.h To: [email protected]; [email protected]; [email protected] From: [email protected] Date: Wed, 19 Dec 2012 23:05:11 +0000

I think You need to download openssl-fips instead of the plain openssl package. Beware that compiling a fips compliant openssl may be tricky

-----Original Message----- From: ning ji <[email protected]> Sender: [email protected] Date: Wed, 19 Dec 2012 22:28:59 To: <[email protected]> Subject: [stunnel-users] cannot find openssl/fips.h

_______________________________________________ stunnel-users mailing list [email protected] https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

ning ji wrote:

tried openssl-fips-2.0.tar.gz, openssl-fips-2.0.1.tar.gz, openssl-fips-2.0.2.tar.gz. none of them has ocsp.h

Any thoughts ?

Yes. You really need to read the fine manual: https://openssl.org/docs/fips/UserGuide-2.0.pdf before asking your questions here. openssl-fips-*.tar.gz are only used to build the FIPS canister for OpenSSL. Mike