[openssl-users] QNX cross-compiled openssl with fips

[Piotr Łobacz]

Ok i have finally managed to find what is the problem. The generated
value of digest under linux had bad value. Now i have to correct incore
file for QNX platform. Wish me luck or if anybody can help me with this
i would be pleased. :)

Dnia 2015-04-03, pią o godzinie 11:16 +0200, Piotr Łobacz pisze:
> Ok, whith few modifications to fipsld++ i can now link to libcrypto.so
> and libcrypto.a and applications are working correctly, but mine problem
> still persists because if i would like to dlopen my shared library
> compiled with static libcrypto.a and i'll try to run fips mode from that
> library i get an error: 755413103 which, i have read, means that library
> has an incorect digest and verification has failed. Now i found that
> fips_premain_dso is used to generate/get this digest from library but it
> does not generate or even does not output anything and it does not
> matter if it is linux/QNX or whatever platform it is. Maybe i'm using it
> wrong but could anubody tell me how to use this fips_premain_dso? I'm
> using it like that:
> 
> LD_LIBRARY_PATH=/path/to/where/my/lib/is fips_premain_dso mylib.so
> 
> And that does not output anything.
> 
> Dnia 2015-04-02, czw o godzinie 08:58 +0200, Piotr Łobacz pisze:
> > Yeah i have tried with it and modified it. But mine problem is that i am
> > cross-compiling. I have used incore to generate digest and it works with
> > qcc and i386-pc-nto-qnx6.4.0-gcc. But with i386-pc-nto-qnx6.4.0-g++ and
> > QCC which is for c++ it does not work it generates bad digest. What is a
> > problem because i have to use a machine with qnx to run the compiled
> > code to get the proper digest and than recompile with it, what actually
> > works because i've tested it.
> > 
> > Dnia 2015-04-02, czw o godzinie 02:34 -0400, Jeffrey Walton pisze:
> > > On Thu, Apr 2, 2015 at 2:19 AM, Piotr Łobacz <piotr.lobacz at radmor.com.pl> wrote:
> > > > Ok finally my app is working and compiled with c++ compiler but the
> > > > problem persist because elf incore is bad for QNX apps compiled with g++
> > > > or QCC compiler. It generates bad digest. Even incore2 generates bad
> > > > digest, and i dunno why that happens. Any suggestions?
> > > 
> > > You might try fipsld++
> > > (https://wiki.openssl.org/index.php/Fipsld_and_C%2B%2B). Its for
> > > handling C++ compilers.
> > > 
> > > I'm not sure why the various symbols are not exported with extern "C".
> > > 
> > > I don't recall trying it with a cross compile, though. It may work, it
> > > may not work. Either way, it may give you some ideas.
> > > 
> > > Jeff
> > 
> 

-- 

________________________________________________________________________
Piotr Łobacz

Biuro Systemów i Oprogramowania

RADMOR S.A.

tel. (58) 6996 929

e-mail: piotr.lobacz at radmor.com.pl

www.radmor.com.pl




RADMOR S.A., ul. Hutnicza 3, 81-212 Gdynia

NIP: 586-010-21-39

REGON: 190432077

KRS: 0000074029 (Sąd Rejonowy Gdańsk-Północ w Gdańsku)

Kapitał zakładowy wpłacony: 9 282 830 PLN