[openssl-users] FIPS building scripts does NOT work for iOS >=7
Yang Hong
hongyang99 at gmail.com
Thu Feb 4 20:19:28 UTC 2016
Hello folks.
I follow the latest User Guide 2.0 to build iOS the FIPS Object Module and
FIPS Capable library for iOS devices (*E.2 Apple iOS Support *page 131)
https://www.openssl.org/docs/fips/UserGuide-2.0.pdf
I got two errors below.
************************************************************
Error #1:
*$ llvmgcc -v*
openssl-fips-2.0.1/iOS/llvm-gcc: line 8: /Applications/
Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/usr/bin//llvm-gcc:
No such file or directory
Error #2:
$,/config
$make
making fips in crypto...
openssl-fips-2.0.1/iOS/llvm-gcc -I. -I.. -I../include
-DOPENSSL_FIPSCANISTER -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN
-DHAVE_DLFCN_H -arm64-9-ios -arch armv7 -O3 -isysroot
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk
-fomit-frame-pointer -fno-common -c -o cryptlib.o cryptlib.c
openssl-fips-2.0.1/iOS/llvm-gcc: line 8:
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/usr/bin//llvm-gcc:
No such file or directory
*********************************************************************
It seems that the OpenSSL repository for building FIPS module for iOS
remains unchanged since the year 2012. The building script only works on
iOS < 7.
http://openssl.com/fips/2.0/platforms/ios/
The file “Configure” of openssl-fips-2.0.1.tar.gz only allows to build FIPS
module for iOS < 7.
However, the file “Configure” of openssl-fips-2.0.11.tar.gz allows to build
FIPS module for iOS >=7. The configuration setting for iOS >=7 has been
updated on July 4, 2015.
Would you please update the corresponding shell scripts setenv-reset.sh and
serenv-ios-11.sh in the following repository? Thank you very much.
http://openssl.com/fips/2.0/platforms/ios/
With best regards,
Winston Hong
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160204/e95289e8/attachment-0001.html>
More information about the openssl-users
mailing list