[openssl-dev] Openssl apps linker errors after adding new cipher

Mon Jul 11 02:13:08 UTC 2016

Dear all,

I'm pretty new to this mailing list so please be easy on me :) I have
integrated a custom 256bit symmetric cipher into OpenSSL 1.0.2g (the ubuntu
version); and now i'm facing linker errors building openssl apps. My new
cipher is called MYCIPH or myciph.

The format for the modifications are as follows:

<Filename>:

x* <Code>

*x indicates the Line No. for the modification/insertion

openssl/Makefile.org:

                97 MYCIPH_ENC= myciph_enc.o

...

144 # dirs in crypto to build

145 SDIRS= \

...

148 des aes rc2 rc4 rc5 idea bf *myciph* cast camellia seed

...

231 MYCIPH_ENC= ‘$(MYCIPH_ENC)’

crypto/evp/Makefile:

22 e_des.c e_bf.c e_*myciph*.c e_idea.c …

...

35 e_des.o e_bf.o e_*myciph*.o e_idea.o …

obj_mac.num:*

958 *myciph* 958

objects.txt:

421 1 3 3 7 : *MYCIPH*  : *myciph*

evp.h:

87 # define EVP_MAX_IV_LENGTH *32*

782 #endif

783 #ifndef OPENSSL_NO_*MYCIPH*

784 const EVP_CIPHER *EVP_*myciph*(void);

785 #endif

786 # ifndef OPENSSL_NO_RC4

c_allc.c:

145 #ifndef OPENSSL_NO_*MYCIPH*

146 EVP_add_cipher(EVP_*myciph*());

147 EVP_add_cipher_alias(SN_drgn_bd,"*myciph*");

148 EVP_add_cipher_alias(SN_drgn_bd,"*MYCIPH*");

149 #endif

ssl_algs.c:

 81 #ifndef OPENSSL_NO_*MYCIPH*

82 EVP_add_cipher(EVP_*myciph*());

83 #endif

ssl_locl.h:

357 # define *SSL_MYCIPH*   0x00004000L

ssl_ciph.c:

167 # define *SSL_ENC_MYCIPH_IDX* 14

168 # define SSL_ENC_NUM_IDX 15

172 static const EVP_CIPHER*ssl_cipher_methods[SSL_ENC_NUM_IDX]={

173 NULL,*NULL*,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,

NULL, NULL

174 };

305 {0, SSL_TXT_*MYCIPH*, 0, 0, 0, SSL_*MYCIPH*, 0, 0, 0, 0, 0, 0},

//void ssl_load_ciphers(void){

407 ssl_cipher_methods[SSL_ENC_*MYCIPH*_IDX]= EVP_get_cipherbyname(SN_
*myciph*);

//int ssl_cipher_get_evp(...){

//switch (c->algorithm_enc){

585 case SSL_*MYCIPH*:

586 i = SSL_ENC_*MYCIPH*_IDX;

587 break;

675 else if (c->algorithm_enc == SSL_*MYCIPH* &&

676 (evp=EVP_get_cipherbyname("*MYCIPH*")))

677 *enc = evp, *md = NULL;

796 *enc |= (ssl_cipher_methods[SSL_ENC_*MYCIPH*_IDX ] ==

NULL) ? SSL_*MYCIPH* :0;

1784 case SSL_*MYCIPH*:

1785 enc="*MYCIPH*(256)";

1786 break;

s3_lib.c:

604 {

605 1,

606 SSL3_TXT_RSA_*MYCIPH*,

607 SSL3_CK_RSA_*MYCIPH*,

608 SSL_kRSA,

609 SSL_aRSA,

610 SSL_*MYCIPH*,

611 SSL_MD5,

612 SSL_SSLV3,

613 SSL_NOT_EXP|SSL_MEDIUM,

614 SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

615 256, //Key-Size (bits)

616 256, //IV-Size (bits)

617 },

ssl.h:

              300 # define SSL_TXT_*MYCIPH* "*MYCIPH*”

ssl3.h:

179 # define SSL3_CK_RSA_*MYCIPH *0x0300001C

...

254 # define SSL3_TXT_RSA_*MYCIPH* "*MYCIPH*"

apps/prog.pl:

85 "cast-cbc", "rc5-cbc", "rc5-ecb", "rc5-cfb", "rc5-ofb",

86 "*myciph*", )

After I changed these files. Compiling using ./config fips; make depend;
make was successful and the apps can link nicely. I even manage to test my
cipher via the EVP interface: openssl speed -evp mynewcipher.

However, when I build by configuring with ./config fips shared; make
depend; make to generate shared objects for libcrypto and libssl I get the
following linker error:

making all in apps...
make[1]: Entering directory
'/home/wanghao/Documents/iVPN/openssl_new/openssl-1.0.2g/apps'
rm -f openssl
shlib_target=; if [ -n "libcrypto.so.1.0.2 libssl.so.1.0.2" ]; then \
shlib_target="linux-shared"; \
elif [ -n "" ]; then \
  FIPSLD_CC="gcc"; CC=/usr/local/ssl/fips-2.0/bin/fipsld; export CC
FIPSLD_CC; \
fi; \
LIBRARIES="-L.. -lssl  -L.. -lcrypto" ; \
make -f ../Makefile.shared -e \
APPNAME=openssl OBJECTS="openssl.o verify.o asn1pars.o req.o dgst.o dh.o
dhparam.o enc.o passwd.o gendh.o errstr.o ca.o pkcs7.o crl2p7.o crl.o rsa.o
rsautl.o dsa.o dsaparam.o ec.o ecparam.o x509.o genrsa.o gendsa.o genpkey.o
s_server.o s_client.o speed.o s_time.o apps.o s_cb.o s_socket.o app_rand.o
version.o sess_id.o ciphers.o nseq.o pkcs12.o pkcs8.o pkey.o pkeyparam.o
pkeyutl.o spkac.o smime.o cms.o rand.o engine.o ocsp.o prime.o ts.o srp.o" \
LIBDEPS=" $LIBRARIES -ldl" \
link_app.${shlib_target}
make[2]: Entering directory
'/home/wanghao/Documents/iVPN/openssl_new/openssl-1.0.2g/apps'
../libssl.so: undefined reference to `EVP_flcn_bd'
collect2: error: ld returned 1 exit status
../Makefile.shared:171: recipe for target 'link_app.gnu' failed
make[2]: *** [link_app.gnu] Error 1
make[2]: Leaving directory
'/home/wanghao/Documents/iVPN/openssl_new/openssl-1.0.2g/apps'
Makefile:156: recipe for target 'openssl' failed
make[1]: *** [openssl] Error 2
make[1]: Leaving directory
'/home/wanghao/Documents/iVPN/openssl_new/openssl-1.0.2g/apps'
Makefile:297: recipe for target 'build_apps' failed
make: *** [build_apps] Error 1

Did I miss out anything I have to change? Were my changes correct? please
advise thanks.

Best Regards
Wang Hao LEE
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160711/5a82a3fa/attachment-0001.html>