[Pkg-openssl-devel] Question about building FIPS-capable openssl 1.0.2k

[Kurt Roeckx]

On Wed, Feb 08, 2017 at 01:21:44PM -0600, Martin.Belanger at dell.com wrote:
> /home/mbelanger/openssl/openssl-1.0.2k/apps/speed.c:1291: undefined reference to `private_DES_set_key_unchecked'

So the problem is that private_DES_set_key_unchecked isn't
exported, and I don't expect private symbols to be exported in the
library.

I'm not sure why they get renamed to private either, but I assume
it's for a good reason.

Anyway, you will have at least 3 options:
- Edit the debian/patches/version-script.patch file, and also add those missing symbols in it
- Disable the symbol versioning
- Make sure those private functions aren't being called by the
  apps or libssl.

> By the way, I successfully did the same thing with the upstream openssl 1.0.2k code.

That code doesn't do symbol versioning.


Kurt