[Bug 272454] openssl 3 fips module doesn't load on arm64

From: <bugzilla-noreply_at_freebsd.org>
Date: Wed, 12 Jul 2023 20:12:12 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=272454

Mark Johnston <markj@FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|New                         |Open

--- Comment #3 from Mark Johnston <markj@FreeBSD.org> ---
(In reply to Pierre Pronchery from comment #1)
The patch fixes the error, but now I get an error for a different symbol:

markj@devkit> openssl rc4 -provider fips -e -a -pbkdf2
rc4: unable to load provider fips
Hint: use -provider-path option or OPENSSL_MODULES environment variable.
0020018DE9650000:error:12800067:DSO support routines:dlfcn_load:could not load
the shared
library:/usr/home/markj/src/freebsd/crypto/openssl/crypto/dso/dso_dlfcn.c:118:filename(/usr/lib/ossl-modules/fips.so):
/usr/lib/ossl-modules/fips.so: Undefined symbol "gcm_ghash_v8"
0020018DE9650000:error:12800067:DSO support routines:DSO_load:could not load
the shared
library:/usr/home/markj/src/freebsd/crypto/openssl/crypto/dso/dso_lib.c:152:
0020018DE9650000:error:07880025:common libcrypto
routines:provider_init:reason(524325):/usr/home/markj/src/freebsd/crypto/openssl/crypto/provider_core.c:912:name=fips

(In reply to Pierre Pronchery from comment #1)
> I suspect that on amd64 the symbols are exposed through libcrypto.so, while arm64 looks for them only in fips.so. Does it make sense?

You're suggesting that symbol resolution is somehow working differently on
arm64 than amd64?  I think this is unlikely.

-- 
You are receiving this mail because:
You are the assignee for the bug.