Re: afalg with OpenSSL 1.1.0f 25 May 2017

Comments inserted.

On 14/08/17 08:20, Jitendra Lulla wrote:
> Hi,
> 
> I am trying to use afalg on Linux 4.9.37 with OpenSSL 1.1.0f.
> 
> I am facing 2 issues:
> 
> ONE: when I issue the speed command, I see the following:
> 
> [root@localhost apps]# ./openssl speed -evp aes-128-cbc -engine afalg
> invalid engine "afalg"
> 139853452924736:error:2506406A:DSO support routines:dlfcn_bind_func:could not bind to the requested symbol name:crypto/dso/dso_dlfcn.c:178:symname(bind_engine): /usr/local/lib64/engines-1.1/afalg.so: undefined symbol: bind_engine
> 139853452924736:error:2506C06A:DSO support routines:DSO_bind_func:could not bind to the requested symbol name:crypto/dso/dso_lib.c:185:
> 139853452924736:error:260B6068:engine routines:dynamic_load:DSO failure:crypto/engine/eng_dyn.c:427:
> 139853452924736:error:2606A074:engine routines:ENGINE_by_id:no such engine:crypto/engine/eng_list.c:339:id=afalg
> 139853452924736:error:25066067:DS
> 
> 
> nm afalg.so doesn't show bind_engine
> 
Assuming you have already successfully built OpenSSL using "make", from
the "test" subdir of the directory where you downloaded the source, what
happens if you execute:

OPENSSL_ENGINES=../engines/afalg ../util/shlib_wrap.sh ./afalgtest

Another thing to try is (from the top level source dir)

touch engines/afalg/e_afalg.c
make

Check to see if there are any warnings generated during the compilation
of the engine.

> 
> When I modify the openssl.cnf file with the engine name and the CIPHERS, still I dont get it working. The command output and the change in the openssl.cnf pasted at the end of the mail.
> 
> 
> TWO: I had to create a softlink to libcrypto.so.1.1 and libssl.so.1.1 like the following to make openssl command work:
> ln -s /usr/local/lib64/libssl.so.1.1 /lib64/libssl.so.1.1
> ln -s /usr/local/lib64/libcrypto.so.1.1 /lib64/libcrypto.so.1.1
> 
> Is creating the softlinks a known issue and will be fixed? 
No, this will not be fixed and may not be the most appropriate thing to
do on all systems.


Matt


> 
> I have pasted the complete information about the OS/distro environment and installation commands I ran at the bottom.
> Could you please suggest what wrong I am doing to make afalg work.
> 
> Thanks
> Jitendra Lulla
> 
> ========
> 
> 
> BEFORE INSTALLATION:
> 
> [root@localhost jlulla]# rpm -qa  |grep openssl
> openssl-1.0.1e-60.el7.x86_64
> openssl-devel-1.0.1e-60.el7.x86_64
> openssl-libs-1.0.1e-60.el7.x86_64
> 
> [root@localhost jlulla]# openssl version
> OpenSSL 1.0.1e-fips 11 Feb 2013
> 
> 
> 
> PLEASE SEE FROM HERE PLEASE SEE FROM HERE PLEASE SEE FROM HERE----------------------------
> 
> STEP 1 : SOURCE TAKEN FROM https://www.openssl.org/source/openssl-1.1.0f.tar.gz 2017-May-25 13:09:51
> 
> [root@localhost jlulla]# uname -a
> Linux localhost.localdomain 4.9.37 #1 SMP Fri Jul 21 04:52:46 PDT 2017 x86_64 x86_64 x86_64 GNU/Linux
> 
> [root@localhost jlulla]# cat /etc/redhat-release
> Red Hat Enterprise Linux Server release 7.3 (Maipo)
> 
> 
> 
> [root@localhost openssl-1.1.0f]# pwd
> /home/jlulla/openssl-1.1.0f
> 
> STEP 2: [root@localhost openssl-1.1.0f]# ./config shared enable-engine enable-dso enable-afalgeng
> Operating system: x86_64-whatever-linux2
> Configuring for linux-x86_64
> Configuring OpenSSL version 1.1.0f (0x1010006fL)
>     no-asan        [default]  OPENSSL_NO_ASAN
>     no-crypto-mdebug [default]  OPENSSL_NO_CRYPTO_MDEBUG
>     no-crypto-mdebug-backtrace [default]  OPENSSL_NO_CRYPTO_MDEBUG_BACKTRACE
>     no-ec_nistp_64_gcc_128 [default]  OPENSSL_NO_EC_NISTP_64_GCC_128
>     no-egd          [default]  OPENSSL_NO_EGD
>     no-fuzz-afl    [default]  OPENSSL_NO_FUZZ_AFL
>     no-fuzz-libfuzzer [default]  OPENSSL_NO_FUZZ_LIBFUZZER
>     no-heartbeats  [default]  OPENSSL_NO_HEARTBEATS
>     no-md2          [default]  OPENSSL_NO_MD2 (skip dir)
>     no-msan        [default]  OPENSSL_NO_MSAN
>     no-rc5          [default]  OPENSSL_NO_RC5 (skip dir)
>     no-sctp        [default]  OPENSSL_NO_SCTP
>     no-ssl-trace    [default]  OPENSSL_NO_SSL_TRACE
>     no-ssl3        [default]  OPENSSL_NO_SSL3
>     no-ssl3-method  [default]  OPENSSL_NO_SSL3_METHOD
>     no-ubsan        [default]  OPENSSL_NO_UBSAN
>     no-unit-test    [default]  OPENSSL_NO_UNIT_TEST
>     no-weak-ssl-ciphers [default]  OPENSSL_NO_WEAK_SSL_CIPHERS
>     no-zlib        [default]
>     no-zlib-dynamic [default]
> Configuring for linux-x86_64
> CC            =gcc
> CFLAG        =-Wall -O3 -pthread -m64 -DL_ENDIAN  -Wa,--noexecstack
> SHARED_CFLAG  =-fPIC -DOPENSSL_USE_NODELETE
> DEFINES      =DSO_DLFCN HAVE_DLFCN_H NDEBUG OPENSSL_THREADS OPENSSL_NO_STATIC_ENGINE OPENSSL_PIC OPENSSL_IA32_SSE2 OPENSSL_BN_ASM_MONT OPENSSL_BN_ASM_MONT5 OPENSSL_BN_ASM_GF2m SHA1_ASM SHA256_ASM SHA512_ASM RC4_ASM MD5_ASM AES_ASM VPAES_ASM BSAES_ASM GHASH_ASM ECP_NISTZ256_ASM PADLOCK_ASM POLY1305_ASM
> LFLAG        =
> PLIB_LFLAG    =
> EX_LIBS      =-ldl
> APPS_OBJ      =
> CPUID_OBJ    =x86_64cpuid.o
> UPLINK_OBJ    =
> BN_ASM        =asm/x86_64-gcc.o x86_64-mont.o x86_64-mont5.o x86_64-gf2m.o rsaz_exp.o rsaz-x86_64.o rsaz-avx2.o
> EC_ASM        =ecp_nistz256.o ecp_nistz256-x86_64.o
> DES_ENC      =des_enc.o fcrypt_b.o
> AES_ENC      =aes-x86_64.o vpaes-x86_64.o bsaes-x86_64.o aesni-x86_64.o aesni-sha1-x86_64.o aesni-sha256-x86_64.o aesni-mb-x86_64.o
> BF_ENC        =bf_enc.o
> CAST_ENC      =c_enc.o
> RC4_ENC      =rc4-x86_64.o rc4-md5-x86_64.o
> RC5_ENC      =rc5_enc.o
> MD5_OBJ_ASM  =md5-x86_64.o
> SHA1_OBJ_ASM  =sha1-x86_64.o sha256-x86_64.o sha512-x86_64.o sha1-mb-x86_64.o sha256-mb-x86_64.o
> RMD160_OBJ_ASM=
> CMLL_ENC      =cmll-x86_64.o cmll_misc.o
> MODES_OBJ    =ghash-x86_64.o aesni-gcm-x86_64.o
> PADLOCK_OBJ  =e_padlock-x86_64.o
> CHACHA_ENC    =chacha-x86_64.o
> POLY1305_OBJ  =poly1305-x86_64.o
> BLAKE2_OBJ    =
> PROCESSOR    =
> RANLIB        =ranlib
> ARFLAGS      =
> PERL          =/usr/bin/perl
> 
> SIXTY_FOUR_BIT_LONG mode
> 
> Configured for linux-x86_64.
> [root@localhost openssl-1.1.0f]#
> 
> make didnt give any error.
> 
> make install didnt give any error
> 
> updatedb
> 
> STEP 2: 
> [root@localhost openssl-1.1.0f]# md5sum /home/jlulla/openssl-1.1.0f/libssl.so.1.1 /usr/local/lib64/libssl.so.1.1
> 5a7264a3ebda22989c831794d30677c5  /home/jlulla/openssl-1.1.0f/libssl.so.1.1
> 5a7264a3ebda22989c831794d30677c5  /usr/local/lib64/libssl.so.1.1
> 
> [root@localhost openssl-1.1.0f]# ls -l /home/jlulla/openssl-1.1.0f/libssl.so
> lrwxrwxrwx. 1 root root 13 Aug 10 23:45 /home/jlulla/openssl-1.1.0f/libssl.so -> libssl.so.1.1
> 
> 
> [root@localhost apps]# pwd
> /home/jlulla/openssl-1.1.0f/apps
> [root@localhost apps]# ./openssl
> ./openssl: error while loading shared libraries: libssl.so.1.1: cannot open shared object file: No such file or directory
> 
> [root@localhost apps]# ldd ./openssl
>         linux-vdso.so.1 =>  (0x00007ffd02f3c000)
>         libssl.so.1.1 => not found
>         libcrypto.so.1.1 => not found
>         libdl.so.2 => /lib64/libdl.so.2 (0x00007f0439fda000)
>         libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f0439dbe000)
>         libc.so.6 => /lib64/libc.so.6 (0x00007f04399fc000)
>         /lib64/ld-linux-x86-64.so.2 (0x000055d618530000)
> 
> 
> [root@localhost apps]# ls -l /lib64/libssl.so.1.1
> ls: cannot access /lib64/libssl.so.1.1: No such file or directory
> 
> ln -s /usr/local/lib64/libssl.so.1.1 /lib64/libssl.so.1.1
> 
> STEP 3:
> [root@localhost apps]# ln -s /usr/local/lib64/libssl.so.1.1 /lib64/libssl.so.1.1
> [root@localhost apps]# ls -l /lib64/libssl.so.1.1
> lrwxrwxrwx. 1 root root 30 Aug 10 23:57 /lib64/libssl.so.1.1 -> /usr/local/lib64/libssl.so.1.1
> 
> 
> [root@localhost apps]# ln -s /usr/local/lib64/libcrypto.so.1.1 /lib64/libcrypto.so.1.1
> [root@localhost apps]# ls -l /lib64/libcrypto.so.1.1
> lrwxrwxrwx. 1 root root 33 Aug 10 23:58 /lib64/libcrypto.so.1.1 -> /usr/local/lib64/libcrypto.so.1.1
> 
> [root@localhost apps]# ldd ./openssl
>         linux-vdso.so.1 =>  (0x00007ffd37b5e000)
>         libssl.so.1.1 => /lib64/libssl.so.1.1 (0x00007f82881f8000)
>         libcrypto.so.1.1 => /lib64/libcrypto.so.1.1 (0x00007f8287d73000)
>         libdl.so.2 => /lib64/libdl.so.2 (0x00007f8287b6e000)
>         libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f8287952000)
>         libc.so.6 => /lib64/libc.so.6 (0x00007f8287591000)
>         /lib64/ld-linux-x86-64.so.2 (0x000055f06bc67000)
> 
> 
> [root@localhost apps]# ./openssl version
> OpenSSL 1.1.0f  25 May 2017
> 
> 
> STEP 4:
> [root@localhost afalg]# pwd
> /home/jlulla/openssl-1.1.0f/engines/afalg
> 
> [root@localhost afalg]# ls
> afalg.so  build.info  e_afalg.c  e_afalg.d  e_afalg.ec  e_afalg_err.c  e_afalg_err.d  e_afalg_err.h  e_afalg_err.o  e_afalg.h  e_afalg.o
> 
> [root@localhost afalg]# ldd afalg.so
>         linux-vdso.so.1 =>  (0x00007fff1d7ef000)
>         libcrypto.so.1.1 => /lib64/libcrypto.so.1.1 (0x00007f3a80166000)
>         libdl.so.2 => /lib64/libdl.so.2 (0x00007f3a7ff62000)
>         libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f3a7fd45000)
>         libc.so.6 => /lib64/libc.so.6 (0x00007f3a7f984000)
>         /lib64/ld-linux-x86-64.so.2 (0x0000560991976000)
> 
> 
> [root@localhost afalg]# nm afalg.so
> 0000000000202060 d AFALG_error_init
> 0000000000202220 b AFALG_lib_error_code
> 0000000000202160 d AFALG_str_functs
> 0000000000202080 d AFALG_str_reasons
> 0000000000202210 B __bss_start
> 0000000000202210 b completed.6344
>                 w __cxa_finalize@@GLIBC_2.2.5
> 0000000000000a00 t deregister_tm_clones
> 0000000000000a70 t __do_global_dtors_aux
> 0000000000201da0 t __do_global_dtors_aux_fini_array_entry
> 0000000000201db0 d __dso_handle
> 0000000000201db8 d _DYNAMIC
> 0000000000202210 D _edata
> 0000000000202228 B _end
> 0000000000000af0 T engine_load_afalg_int
> 0000000000000bb0 T ERR_AFALG_error
>                 U ERR_get_next_error_library@@OPENSSL_1_1_0
> 0000000000000b00 T ERR_load_AFALG_strings
>                 U ERR_load_strings@@OPENSSL_1_1_0
>                 U ERR_put_error@@OPENSSL_1_1_0
> 0000000000000b60 T ERR_unload_AFALG_strings
>                 U ERR_unload_strings@@OPENSSL_1_1_0
> 0000000000000bf8 T _fini
> 0000000000000ab0 t frame_dummy
> 0000000000201d98 t __frame_dummy_init_array_entry
> 0000000000000eb8 r __FRAME_END__
> 0000000000202000 d _GLOBAL_OFFSET_TABLE_
>                 w __gmon_start__
> 0000000000000970 T _init
>                 w _ITM_deregisterTMCloneTable
>                 w _ITM_registerTMCloneTable
> 0000000000201da8 d __JCR_END__
> 0000000000201da8 d __JCR_LIST__
>                 w _Jv_RegisterClasses
> 0000000000000a30 t register_tm_clones
> 0000000000202210 d __TMC_END__
> 
> 
> [root@localhost openssl-1.1.0f]# locate afalg.so
> /home/jlulla/openssl-1.1.0f/engines/afalg/afalg.so
> /usr/local/lib64/engines-1.1/afalg.so
> 
> 
> [root@localhost openssl-1.1.0f]# md5sum /home/jlulla/openssl-1.1.0f/engines/afalg/afalg.so /usr/local/lib64/engines-1.1/afalg.so
> ec273faa6eb6e25f55e44a7d37adf195  /home/jlulla/openssl-1.1.0f/engines/afalg/afalg.so
> ec273faa6eb6e25f55e44a7d37adf195  /usr/local/lib64/engines-1.1/afalg.so
> 
> 
> [root@localhost apps]# date
> Fri Aug 11 00:01:10 PDT 2017
> 
> 
> [root@localhost apps]# ls -l /usr/local/ssl/openssl.cnf
> -rw-r--r--. 1 root root 10771 Aug 10 23:47 /usr/local/ssl/openssl.cnf
> 
> [root@localhost apps]# md5sum /usr/local/ssl/openssl.cnf /home/jlulla/openssl-1.1.0f/apps/openssl.cnf
> f697ef5df0d006882e6326606e8dbf4a  /usr/local/ssl/openssl.cnf
> f697ef5df0d006882e6326606e8dbf4a  /home/jlulla/openssl-1.1.0f/apps/openssl.cnf
> 
> 
> openssl.cnf has the following:
> ..
> ..
> # Extra OBJECT IDENTIFIER info:
> #oid_file              = $ENV::HOME/.oid
> oid_section            = new_oids
> 
> # To use this configuration file with the "-extfile" option of the
> # "openssl x509" utility, name here the section containing the
> # X.509v3 extensions to use:
> # extensions            =
> # (Alternatively, use a configuration file that has only
> # X.509v3 extensions in its main [= default] section.)
> 
> ..
> ..
> 
> [root@localhost apps]# ./openssl speed -evp aes-128-cbc -engine afalg
> invalid engine "afalg"
> 139853452924736:error:2506406A:DSO support routines:dlfcn_bind_func:could not bind to the requested symbol name:crypto/dso/dso_dlfcn.c:178:symname(bind_engine): /usr/local/lib64/engines-1.1/afalg.so: undefined symbol: bind_engine
> 139853452924736:error:2506C06A:DSO support routines:DSO_bind_func:could not bind to the requested symbol name:crypto/dso/dso_lib.c:185:
> 139853452924736:error:260B6068:engine routines:dynamic_load:DSO failure:crypto/engine/eng_dyn.c:427:
> 139853452924736:error:2606A074:engine routines:ENGINE_by_id:no such engine:crypto/engine/eng_list.c:339:id=afalg
> 139853452924736:error:25066067:DSO support routines:dlfcn_load:could not load the shared library:crypto/dso/dso_dlfcn.c:113:filename(libafalg.so): libafalg.so: cannot open shared object file: No such file or directory
> 139853452924736:error:25070067:DSO support routines:DSO_load:could not load the shared library:crypto/dso/dso_lib.c:161:
> 139853452924736:error:260B6084:engine routines:dynamic_load:dso not found:crypto/engine/eng_dyn.c:414:
> ^C
> 
> 
> Modified both the files as the follwing:
> /usr/local/ssl/openssl.cnf
> /home/jlulla/openssl-1.1.0f/apps/openssl.cnf
> 
> # Extra OBJECT IDENTIFIER info:
> #oid_file              = $ENV::HOME/.oid
> oid_section            = new_oids
> 
> openssl_conf = openssl_def
> 
> [openssl_def]
> engines = openssl_engines
> 
> [openssl_engines]
> afalg = afalg_engine
> 
> [afalg_engine]
> CIPHERS=aes-128-cbc
> 
> With the above, the errors are more:
> [root@localhost apps]# ./openssl speed -evp aes-128-cbc -engine afalg
> invalid engine "afalg"
> 140473780422464:error:2506406A:DSO support routines:dlfcn_bind_func:could not bind to the requested symbol name:crypto/dso/dso_dlfcn.c:178:symname(bind_engine): /usr/local/lib64/engines-1.1/afalg.so: undefined symbol: bind_engine
> 140473780422464:error:2506C06A:DSO support routines:DSO_bind_func:could not bind to the requested symbol name:crypto/dso/dso_lib.c:185:
> 140473780422464:error:260B6068:engine routines:dynamic_load:DSO failure:crypto/engine/eng_dyn.c:427:
> 140473780422464:error:2606A074:engine routines:ENGINE_by_id:no such engine:crypto/engine/eng_list.c:339:id=afalg
> 140473780422464:error:260BC066:engine routines:int_engine_configure:engine configuration error:crypto/engine/eng_cnf.c:141:section=afalg_engine, name=CIPHERS, value=aes-128-cbc
> 140473780422464:error:0E07606D:configuration file routines:module_run:module initialization error:crypto/conf/conf_mod.c:173:module=engines, value=openssl_engines, retcode=-1
> 140473780422464:error:2506406A:DSO support routines:dlfcn_bind_func:could not bind to the requested symbol name:crypto/dso/dso_dlfcn.c:178:symname(bind_engine): /usr/local/lib64/engines-1.1/afalg.so: undefined symbol: bind_engine
> 140473780422464:error:2506C06A:DSO support routines:DSO_bind_func:could not bind to the requested symbol name:crypto/dso/dso_lib.c:185:
> 140473780422464:error:260B6068:engine routines:dynamic_load:DSO failure:crypto/engine/eng_dyn.c:427:
> 140473780422464:error:2606A074:engine routines:ENGINE_by_id:no such engine:crypto/engine/eng_list.c:339:id=afalg
> 140473780422464:error:25066067:DSO support routines:dlfcn_load:could not load the shared library:crypto/dso/dso_dlfcn.c:113:filename(libafalg.so): libafalg.so: cannot open shared object file: No such file or directory
> 140473780422464:error:25070067:DSO support routines:DSO_load:could not load the shared library:crypto/dso/dso_lib.c:161:
> 140473780422464:error:260B6084:engine routines:dynamic_load:dso not found:crypto/engine/eng_dyn.c:414:
> ^C
> 
-- 
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev