don't know, we were using stunnel 4.52 and openssl 1.0.0.the goal is to use stunnel 5.0. right now i'm at the point, even if i move to stunnel 4.53, it starts crashing even without any arguments.it should just print the help message, has nothing to do with openssl. thanks for your reply !

CC: stunnel-users@stunnel.org From: delaage.pierre@free.fr Subject: Re: [stunnel-users] core dump when running stunnel on Arm based board Date: Sun, 16 Dec 2012 12:08:09 +0100 To: ningji@hotmail.com

Hi, just a question : do you have an openssl lib matching your target platform ?with proper include files and libs accessible at compile time and run time ?Pierre

Le 16 déc. 2012 à 04:24, ning ji ningji@hotmail.com a écrit :

actually problem starts from 4.53. 1. build and run 4.52 is fine2. 4.53 crashes3. setup gdb, as long as i connect to target, it says cannot access memory 0. after i set breakpoint at main() in stunnel.c, it get seg fault signal when i hit "continue" in gdb. panic ...

From: ningji@hotmail.com To: stunnel-users@stunnel.org Date: Sat, 15 Dec 2012 15:43:09 +0000 Subject: [stunnel-users] core dump when running stunnel on Arm based board

Hi everyone, i'm new to this. got a task to update stunnel from 4.52 to 5.00b1. 1. ./configure --host arm-none-linux-gnueabi --target arm-none-linux-gnueabi --prefix= i compared the makefile with the one in our 4.52 code base, same. 2. build with make -C stunnel CROSS_COMPILE=arm-none-linux-gnueabi- ARCH=arm 3. scp to ARM board, run without arugments, core dump. (the line number might be different as i was putting printfs. but as long as it enters parse_commandline, it crashes) [New LWP 867]Cannot access memory at address 0x70797263(gdb) bt#0 parse_commandline (name=0xbefdce29 "/opt/ultra/config/stunnel.conf", parameter=0xbefdce48 "-version") at options.c:1940#1 0x0003ba04 in main_configure (arg1=0xbefdce29 "/opt/ultra/config/stunnel.conf", arg2=0xbefdce48 "-version") at stunnel.c:199#2 0x0003bd44 in main_unix (argv=<optimized out>, argc=<optimized out>)at stunnel.c:135#3 main (argc=3, argv=0xbefdcd24) at stunnel.c:110my question is, it crashed when just entering parse_commandline( ),the 2 arguments look fine to me.How could this happen ?Many thanks !

_______________________________________________ stunnel-users mailing list stunnel-users@stunnel.org https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users _______________________________________________ stunnel-users mailing list stunnel-users@stunnel.org https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

hi, adapt the compilation scripts to your openssl inc and lib path... include for openssl are usually in : /somepath/include or inc32

I recommend you try to compile openssl for your target platform.

Pierre

Le 19 déc. 2012 à 23:28, ning ji ningji@hotmail.com a écrit :

Hi guys,

1. i downloaded openssl 1.0.1c, stunnel-5.0.0b3
2. for stunnel, i turn on fips,

./configure --host=arm-none-linux-gnueabi --target=arm-none-linux-gnueabi --enable-fips --prefix= 3. when build, it failed to find openssl/fips.h 4. no fips.h in openssl, stunnel folder

can anyone give me a hint ?

thanks very much !

---

stunnel-users mailing list stunnel-users@stunnel.org https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

Fips is not in openssl by default, it is a kind of separate module check this page : http://www.openssl.org//docs/fips/fipsnotes.html

and this doc to compile fips for openssl : http://www.openssl.org//docs/fips/UserGuide.pdf

Pierre

Le 19/12/2012 23:59, ning ji a écrit :

Hi Pierre,

this is exactly my question, under openssl, i don't see fips.h.

ningji@BOS2MSTEVENS01:~/openssl-1.0.1c$ find . -name "*fip*" ./crypto/fips_ers.o ./crypto/fips_ers.c ./crypto/o_fips.c ./crypto/fips_err.h ./crypto/o_fips.o ./crypto/evp/evp_fips.o ./crypto/evp/evp_fips.c ./crypto/dsa/fips186a.txt ./test/testfipsssl

any idea ? thanks !

---

CC: stunnel-users@stunnel.org From: delaage.pierre@free.fr Subject: Re: [stunnel-users] cannot find openssl/fips.h Date: Wed, 19 Dec 2012 23:55:32 +0100 To: ningji@hotmail.com

hi, adapt the compilation scripts to your openssl inc and lib path... include for openssl are usually in : /somepath/include or inc32

I recommend you try to compile openssl for your target platform.

Pierre

Le 19 déc. 2012 à 23:28, ning ji <ningji@hotmail.com mailto:ningji@hotmail.com> a écrit :

    Hi guys,


    1. i downloaded openssl 1.0.1c, stunnel-5.0.0b3

    2. for stunnel, i turn on fips,

        ./configure --host=arm-none-linux-gnueabi
        --target=arm-none-linux-gnueabi --enable-fips --prefix= 

    3. when build, it failed to find openssl/fips.h
    4. no fips.h in openssl, stunnel folder

    can anyone give me a hint ?

    thanks very much !

_______________________________________________
stunnel-users mailing list
stunnel-users@stunnel.org <mailto:stunnel-users@stunnel.org>
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

make sense now, thanks a lot !

Subject: Re: [stunnel-users] cannot find openssl/fips.h To: ningji@hotmail.com; stunnel-users-bounces@stunnel.org; stunnel-users@stunnel.org From: josealf@rocketmail.com Date: Wed, 19 Dec 2012 23:05:11 +0000

I think You need to download openssl-fips instead of the plain openssl package. Beware that compiling a fips compliant openssl may be tricky

-----Original Message----- From: ning ji ningji@hotmail.com Sender: stunnel-users-bounces@stunnel.org Date: Wed, 19 Dec 2012 22:28:59 To: stunnel-users@stunnel.org Subject: [stunnel-users] cannot find openssl/fips.h

---

stunnel-users mailing list stunnel-users@stunnel.org https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

ning ji wrote:

tried openssl-fips-2.0.tar.gz, openssl-fips-2.0.1.tar.gz, openssl-fips-2.0.2.tar.gz. none of them has ocsp.h

Any thoughts ?

Yes. You really need to read the fine manual: https://openssl.org/docs/fips/UserGuide-2.0.pdf before asking your questions here.

openssl-fips-*.tar.gz are only used to build the FIPS canister for OpenSSL.

Mike