[openssl-users] FIPS building scripts does NOT work for iOS >=7

Yang Hong hongyang99 at gmail.com
Thu Feb 4 20:19:28 UTC 2016


Hello folks.


I follow the latest User Guide 2.0 to build iOS the FIPS Object Module and
FIPS Capable library for iOS devices (*E.2 Apple iOS Support *page 131)


https://www.openssl.org/docs/fips/UserGuide-2.0.pdf


I got two errors below.

************************************************************

Error #1:


*$ llvm­gcc   -­v*


openssl-fips-2.0.1/iOS/llvm-gcc: line 8: /Applications/

Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/usr/bin//llvm-gcc:
No such file or directory



Error #2:


$,/config


$make


making fips in crypto...

openssl-fips-2.0.1/iOS/llvm-gcc -I. -I.. -I../include
-DOPENSSL_FIPSCANISTER -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN
-DHAVE_DLFCN_H -arm64-9-ios -arch armv7 -O3 -isysroot
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk
-fomit-frame-pointer -fno-common   -c -o cryptlib.o cryptlib.c

openssl-fips-2.0.1/iOS/llvm-gcc: line 8:
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/usr/bin//llvm-gcc:
No such file or directory


*********************************************************************


It seems that the OpenSSL repository for building FIPS module for iOS
remains unchanged since the year 2012. The building script only works on
iOS < 7.


http://openssl.com/fips/2.0/platforms/ios/


The file “Configure” of openssl-fips-2.0.1.tar.gz only allows to build FIPS
module for iOS < 7.


However, the file “Configure” of openssl-fips-2.0.11.tar.gz allows to build
FIPS module for iOS >=7. The configuration setting for iOS >=7 has been
updated on July 4, 2015.


Would you please update the corresponding shell scripts setenv-reset.sh and
serenv-ios-11.sh in the following repository? Thank you very much.


http://openssl.com/fips/2.0/platforms/ios/


With best regards,


Winston Hong
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160204/e95289e8/attachment-0001.html>


More information about the openssl-users mailing list