具有FIPS功能的OpenSSL和`makedepend` [英] FIPS Capable OpenSSL and `make depend`
问题描述
我正在尝试为iDevice构建具有FIPS功能的OpenSSL.我正在使用FIPS 2.0齿轮和1.0.1源码.第1步是OpenSSL FIPS对象模块,一切顺利.第2步是支持FIPS的OpenSSL.
I'm trying to build a FIPS Capable OpenSSL for an iDevice. I'm working with the FIPS 2.0 gear, and the 1.0.1 sources. Step 1 is OpenSSL FIPS Object Module, and it went fairly well. Step 2 is FIPS Capable OpenSSL.
要配置支持FIPS的OpenSSL,我们执行:
To configure FIPS Capable OpenSSL, we perform:
./config -no-dtls --with-fiplibdir=/usr/local/ssl/iphoneos/lib
-no-dtls
是必需的,因为Apple省略了STCP和朋友.我不想在此过程中使STCP和DTLS成为依赖项,因此-no-dtls
是显而易见的选择.此外,第三方STCP 肯定会缺少Xcode并交叉编译支持.
-no-dtls
is required because Apple omitted STCP and friends. I don't want to make STCP and DTLS a dependency in this process, so -no-dtls
is the obvious choice. In addition, third party STCP will surely lack Xcode and cross-compilation support.
但是,-no-dtls
要求我们运行make depend
. make depend
导致了我
However, the -no-dtls
requires we run make depend
. make depend
is causing me:
openssl-1.0.1c jwalton$ make depend
making depend in crypto...
../util/domd: line 30: makedepend: command not found
mv: Makefile.new: No such file or directory
make[1]: *** [depend] Error 127
make: *** [depend] Error 1
我尝试在此系统(2012 MBP,Xcode 4.5)上找到makedepend
,但是它的MIA:
I tried finding makedepend
on this system (2012 MBP, Xcode 4.5), but its MIA:
$ find /Applications/Xcode.app/ -name makedepend 2>/dev/null
$ find /usr/ -name makedepend 2>/dev/null
$ find /bin/ -name makedepend 2>/dev/null
$
make depend
在这里至关重要.当我尝试不使用它而继续时,我遇到了STCP问题.因此要求:
make depend
is essential here. When I attempt to continue without it, I run into the STCP problem. Hence the requirement:
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/usr/bin/llvm-gcc -I.. -I../.. -I../modes -I../asn1 -I../evp -I../../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -arch armv7 -O3 -isysroot /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS6.0.sdk -fomit-frame-pointer -fno-common -c -o bss_dgram.o bss_dgram.c
bss_dgram.c:74:26: error: netinet/sctp.h: No such file or directory
bss_dgram.c: In function ‘BIO_new_dgram_sctp’:
bss_dgram.c:843: error: storage size of ‘auth’ isn’t known
bss_dgram.c:860: error: ‘SCTP_AUTH_CHUNK’ undeclared (first use in this function)
bss_dgram.c:860: error: (Each undeclared identifier is reported only once
bss_dgram.c:860: error: for each function it appears in.)
bss_dgram.c:860: error: invalid application of ‘sizeof’ to incomplete type ‘struct sctp_authchunk’
我去了X.org并拿到了包裹.由于缺少依赖关系,因此无法从源代码构建程序包.我看到这种情况在广告上是无限的(我以前走过那条路).
I went to X.org and fetched the package. The package won't build from sources due to missing dependencies. I see this going on ad infinitium (I've been down that road before).
我在这里有什么选择?
推荐答案
要配置支持FIPS的OpenSSL,我们执行:
To configure FIPS Capable OpenSSL, we perform:
./config -no-dtls --with-fiplibdir=/usr/local/ssl/iphoneos/lib
哦...应该是./config fips -no-dtls
...
Dooh... it should be ./config fips -no-dtls
...
这篇关于具有FIPS功能的OpenSSL和`makedepend`的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!