[openssl.org #1708]

View: New views
3 Messages — Rating Filter:   Alert me  

Parent Message unknown [openssl.org #1708]

by James Ding via RT :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I found the solution to this bug. The Mac Intel should be little endian, not
big endian.


I changed the Configure file so that the darwin-i386-cc entry reads as
follows.

"darwin-i386-cc","cc:-O3 -fomit-frame-pointer -fno-common -DL_ENDIAN::
-D_REENTRANT:MACOSX::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL
BF_PTR:::::::::::
darwin-shared:-fPIC::.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",

In other words, for the Darwin-i386, change the -DB_ENDIAN flag to
-DL_ENDIAN.

After that change, the library compiled, tested and installed without a
problem.

Mike Wilder
Cimcor, Inc.
219-736-4400 x6085
wilder.michael@...




______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@...
Automated List Manager                           majordomo@...

Parent Message unknown Re: [openssl.org #1708]

by James Ding via RT :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

> I found the solution to this bug. The Mac Intel should be little endian, not
> big endian.

As was mentioned on openssl-dev, it's known problem, but unfortunately
modifying FIPS 1.1.2 code is not an option. The problem was addressed
earlier in regular branches. Case is being dismissed. A.


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@...
Automated List Manager                           majordomo@...

Parent Message unknown RE: [openssl.org #1708]

by James Ding via RT :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Andy,

I resolved the problem by changing the endian flag for Intel Macs in the
configure file. See my note below. Perhaps this change to the configure file
can be included in future releases.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
For the Intel Mac, change the Configure file. The value for darwin-i386-cc
should be L_ENDIAN, not B_ENDIAN. Otherwise you'll get a fips_canister
fingerprint mismatch.

"darwin-i386-cc","cc:-O3 -fomit-frame-pointer -fno-common -DL_ENDIAN::
-D_REENTRANT:MACOSX::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL
BF_PTR:::::::::::
darwin-shared:-fPIC::.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Thanks,

Mike Wilder
Cimcor, Inc.

-----Original Message-----
From: Andy Polyakov via RT [mailto:rt@...]
Sent: Thursday, July 17, 2008 7:02 AM
To: wilder.michael@...
Cc: openssl-dev@...
Subject: Re: [openssl.org #1708]

> I found the solution to this bug. The Mac Intel should be little endian,
not
> big endian.

As was mentioned on openssl-dev, it's known problem, but unfortunately
modifying FIPS 1.1.2 code is not an option. The problem was addressed
earlier in regular branches. Case is being dismissed. A.



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@...
Automated List Manager                           majordomo@...