[Globalplatform-users] Re: GlobalPlatform2.1.1 and OpenSSL

[Iain M. <mu...@ds...>]

Karsten Ohme wrote on 03/24/06 08:03 PM:
> Iain MacDonnell wrote:
>>
>> Two questions:
>>
>> 1) Is OpenSSL 0.9.7e really needed? The configure script checks for
>>    PEM_read_bio_PrivateKey(), but I don't see that actually used
>>    anywhere. Solaris 10 comes with 0.9.7d, and like to use that if
>>    there isn't a real need for 0.9.7e ... ?
> 
> No. If the API has all needed function, it is OK. The check is only
> performed to make sure that the library is OK. Does this step cause a
> problem? I don't know if the version 0.9.7d has all needed functions, if
> you are successful, I can change the e to a d.

The problem was that AC_CHECK_LIB failed.


> I changed it to PEM_read_PrivateKey, which is used e.g. in
> OP201_calculate_rsa_DAP().

Err, you changed it in the error message but not in the actual test :)

AC_CHECK_LIB(ssl, PEM_read_bio_PrivateKey, [],
         [AC_MSG_ERROR([PEM_read_PrivateKey() not
found, install OpenSSL 0.9.7e or later])])

but wait - that's a red herring anyway - the real problem is that you
need to change "ssl" to "crypto", as libcrypto, not libssl, is where
PEM_read_bio_PrivateKey() is visible.

With that change, configure finishes successfully, even with 0.9.7d.


>> 2) It seems that libGlobalPlatform.so needs to be linked to libcrypto,
>>    but it isn't - I have to manually add '-lcrypto' when building
>>    anything that uses libGlobalPlatform.so (including GPShell)
> 
> I changed the AC_CHECK_LIB autoconf macro to look for the crypto library.
> 
> Let me know, if it works.

Ahhh, you need to do that for GlobalPlatform2.1.1 too - then both my
problems will be solved, I believe.


> I released at:
> 
> http://sourceforge.net/project/showfiles.php?group_id=143343
> 
> the current versions of GlobalPlatform and GPShell. Should be the same 
> state as the CVS.

I'm working from CVS.

BTW, I've run into what appears to be a bigger problem - have you ever
tried this stuff on a big-endian machine?

# /opt/ITmuscle/bin/gpshell list-cflex.txt
mode_201
enable_trace
establish_context
card_connect
select -AID a0000000030000
--> 00A404000700000000000000
<-- 6A82
select_application() returns 0x80216A82 (6A82: The application to be 
selected could not be found.)
# uname -a
SunOS sb150 5.10 Generic_118822-25 sun4u sparc SUNW,Sun-Blade-100
#


Maybe the endianess is a red herring too ... but I've successfully used
this stuff on Solaris x86...

Thanks!

     ~Iain