Menu

OpenSSL 1.1 support in release 4769...

Help
Atul Khare
2019-03-14
2019-04-29
  • Atul Khare

    Atul Khare - 2019-03-14

    I downloaded tpm4769tar.gz (SHA1: ca99a3ccd3e41cdd9983086a9b944023b6049bbc), and per the release notes, it has support for OpenSSL 1.1.

    However:

    1) The README indicates that it's still version 4760 $Id: README 4760 2015-12-25 16:14:13Z kgoldman $

    2) The release doesn't compile with OpenSSL 1.1 (errors in hmac.c), etc.

    Did I do something wrong or is the archive incorrect?

     
    • Ken Goldman

      Ken Goldman - 2019-03-14

      That version of the README is an svn tag for that one file. Tarball 4769 is the correct, latest TPM. It builds and runs with OpenSSL 1.1.0c., and probably any 1.1.x.

      A few questions:

      1. What OS?
      2. What version of OpenSSL?
      3. What makefile?
      4. What file is failing to compile?
      5. What is the failing compile command?
      6. What is the compiler error?
        and
      7. What release notes?
       
  • Atul Khare

    Atul Khare - 2019-03-14

    1) Ubuntu Bionic (18.04)
    2) OpenSSL 1.1.0g 2 Nov 2017
    3) The one generated by comp-unixio.sh
    4) hmac.c: In function ‘TSS_rawhmac’:
    5)

    hmac.c:384:13: error: storage size of ‘hmac’ isn’t known
    >HMAC_CTX hmac;
    6) gcc (Ubuntu 7.3.0-27ubuntu1~18.04) 7.3.0
    7) https://www.openssl.org/docs/man1.1.0/man3/HMAC_Init.html

    The cause of the errors for #5 have already been documented in #7. Are there plans to support OpenSSL 1.1.x with the changes documented in the release notes? Note that it's mutually imcompatible with older OpenSSL versions in this particular aspect.

     
    • Ken Goldman

      Ken Goldman - 2019-03-15

      From the Summary" page:

      "tpm4769 is the latest version, with TPM side support for OpenSSL 1.1."

      There are currently no plans to port the host side. The host side software is for education, prototyping, and the regression test. Use Trousers (the TSS) for applications.

       
  • Atul Khare

    Atul Khare - 2019-03-14

    Perhaps, the easiest recourse is to install OpenSSL 1.1.0c in another folder and compile against it. Since the .configure doesn't have an obvious option to specify alternative versions of OpenSSL, is the best method to edit the .Plo files that seem to point to the specific OpenSSL folder?

     
  • WinPORTS

    WinPORTS - 2019-04-28

    There are a lot of issues with this project.
    We have just downloaded tpm4769tar.gz and when trying to untar it, all files and folder appear at the same folder level. It seems we do not know how to tar files!
    After that, we ran: autogen script. Again, more unnecessary issues.
    Please, FIX these issues and upload a new release so we can test it again.

     
    • Ken Goldman

      Ken Goldman - 2019-04-29

      A few questions to start:

      1. Is WINPORTS the same as Atul Khare, or is this a new topic using an old thread? This thread was about openssl 1.1. Is that your issue?
      2. When you say "we do not know how to tar files", are you asking for tar instructions? What was the error?
      3. The name WINPORTS implies that you are using Windows. Is that correct?

      And for more specfic items.

      1. You imply that there is a directory issue. What exactly is the issue?
      2. You imply that there is a build issue. However, you did not indicate the steps to reproduce the issue. The screen shot omitted the (important) build command.
       
  • WinPORTS

    WinPORTS - 2019-04-28

    Second screenshot

     

Log in to post a comment.