[openssl-dev] [openssl.org #3713] Bug: openssl-1.0.1l, FIPS, HP-UX ia64, Duplicate Symbol "AES_Te" and "AES_Td"

[Stuart Kemp via RT]

Trying to build FIPS capable OpenSSL on HP-UX ia64

Using openssl-fips-2.0.9.tar.gz and openssl-1.0.1l.tar.gz.

Building per the UserGuide-2.0.pdf

OS:
  HP-UX B.11.31 U ia64

Compiler:
  # cc -V
  cc: HP C/aC++ B3910B A.06.28.01 [Aug 09 2014]

Environment  sets FIPSDIR=/tmp/myssl/fips-2.0
FIPS part configured as:
  ./config

Builds OK, and then do "make install"

OpenSSL configured as:
./config fips threads shared no-ec2m no-idea no-mdc2 no-rc5 

Run:
  make depend
  make

Get following errors with duplicate symbols when building OpenSSL:

[ -z "libcrypto" ] || cc +Z -DOPENSSL_PIC -DOPENSSL_THREADS  -DDSO_DLFCN -DHAVE_DLFCN_H -D_REENTRANT -Ae +DD64 +O3 +Olit=all -z -DB_ENDIAN -D_REENTRANT -DOPENSSL_BN_ASM_MONT -I/tmp/myssl/fips-2.0/include -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DGHASH_ASM -Iinclude \
        -DFINGERPRINT_PREMAIN_DSO_LOAD -o fips_premain_dso  \
        /tmp/myssl/fips-2.0/lib/fips_premain.c /tmp/myssl/fips-2.0/lib/fipscanister.o \
        libcrypto.a -ldl

ld: Duplicate symbol "AES_Te" in files /tmp/myssl/fips-2.0/lib/fipscanister.o and libcrypto.a[aes-ia64.o]
ld: Duplicate symbol "AES_Td" in files /tmp/myssl/fips-2.0/lib/fipscanister.o and libcrypto.a[aes-ia64.o]

# nm fipscanister.o|grep AES_T
[708]    |                603840|    2304|OBJT |GLOB |0|   .text|AES_Td
[709]    |                601536|    2304|OBJT |GLOB |0|   .text|AES_Te


# nm openssl-1.0.1l/crypto/aes/aes-ia64.o | grep AES_T
[10]     |                  5632|    2304|OBJT |GLOB |0|   .text|AES_Td
[9]      |                  3328|    2304|OBJT |GLOB |0|   .text|AES_Te


Looks like the symbols "AES_decrypt" and "AES_encrypt" were renamed to "fips_aes_decrypt" and "fips_aes_encrypt" respectively, but "AES_Td" and "AES_Te" were forgotten.

# nm openssl-fips-ecp-2.0.9/crypto/aes/aes-ia64.o | grep GL
OB
[10]     |                  5632|    2304|OBJT |GLOB |0|   .text|AES_Td
[9]      |                  3328|    2304|OBJT |GLOB |0|   .text|AES_Te
[8]      |                  2624|     704|FUNC |GLOB |0|   .text|fips_aes_decrypt
[7]      |                   960|     704|FUNC |GLOB |0|   .text|fips_aes_encrypt



# nm openssl-1.0.1l/crypto/aes/aes-ia64.o | grep GLOB
[10]     |                  5632|    2304|OBJT |GLOB |0|   .text|AES_Td
[9]      |                  3328|    2304|OBJT |GLOB |0|   .text|AES_Te
[8]      |                  2624|     704|FUNC |GLOB |0|   .text|AES_decrypt
[7]      |                   960|     704|FUNC |GLOB |0|   .text|AES_encrypt

Thanks,

-Stuart Kemp


<The HTML signature 'New Signature' does not contain any text>