[Bug 272454] openssl 3 fips module doesn't load on arm64

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 11 Jul 2023 18:22:59 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=272454

            Bug ID: 272454
           Summary: openssl 3 fips module doesn't load on arm64
           Product: Base System
           Version: CURRENT
          Hardware: arm64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: markj@FreeBSD.org
                CC: emaste@freebsd.org

At commit 43ed91e00bbb, I see:

markj@devkit> openssl rc4 -provider fips -e -a -pbkdf2
rc4: unable to load provider fips
Hint: use -provider-path option or OPENSSL_MODULES environment variable.
0020A10D3A430000:error:12800067:DSO support routines:dlfcn_load:could not load
the shared
library:/root/freebsd/crypto/openssl/crypto/dso/dso_dlfcn.c:118:filename(/usr/lib/ossl-modules/fips.so):
/usr/lib/ossl-modules/fips.so: Undefined symbol "aes_v8_encrypt"
0020A10D3A430000:error:12800067:DSO support routines:DSO_load:could not load
the shared library:/root/freebsd/crypto/openssl/crypto/dso/dso_lib.c:152:
0020A10D3A430000:error:07880025:common libcrypto
routines:provider_init:reason(524325):/root/freebsd/crypto/openssl/crypto/provider_core.c:912:name=fips

Whereas on amd64 at the same revision:

markj@biggie> openssl rc4 -provider fips -e -a -pbkdf2
rc4: unable to load provider fips
Hint: use -provider-path option or OPENSSL_MODULES environment variable.
002061FB0A5B0000:error:1C8000D5:Provider routines:SELF_TEST_post:missing config
data:/root/freebsd/crypto/openssl/providers/fips/self_test.c:290:
002061FB0A5B0000:error:1C8000E0:Provider routines:ossl_set_error_state:fips
module entering error
state:/root/freebsd/crypto/openssl/providers/fips/self_test.c:388:
002061FB0A5B0000:error:1C8000D8:Provider routines:OSSL_provider_init_int:self
test post failure:/root/freebsd/crypto/openssl/providers/fips/fipsprov.c:707:
002061FB0A5B0000:error:078C0105:common libcrypto routines:provider_init:init
fail:/root/freebsd/crypto/openssl/crypto/provider_core.c:932:name=fips

-- 
You are receiving this mail because:
You are the assignee for the bug.