[openssl-dev] [openssl.org #3713] Bug: openssl-1.0.1l, FIPS, HP-UX ia64, Duplicate Symbol "AES_Te" and "AES_Td"

[Andy Polyakov via RT]

>> The SecurityPolicy.pdf claims that HP-UX 11i IA64 is a Supported
>> Configuration; how can this claim be made when the code does nto even
>> compile correctly?
> 
> The FIPS module compiles correctly but there is the duplicated symbol issue
> when you use the FIPS capable OpenSSL.
> 
> Although we can't change the FIPS module symbols without a change letter you
> can change the symbols on the OpenSSL side. So if you change them to (say)
> ossl_AES_Te and ossl_AES_Td and make sure the non-FIPS capable OpenSSL still
> compiles it should work.

Presumably simpler option should be to remove .global AES_T[ed]#
directives in crypto/aes/asm/aes-ia64.S (see attached). I don't have
possibility to actually verify it on HP-UX, but at least Linux linker
output look proper (can't execute either, only look at binaries).


-------------- next part --------------
A non-text attachment was scrubbed...
Name: aes-ia64.diff
Type: text/x-patch
Size: 702 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160203/f5070b86/attachment.bin>