OpenSSL with FIPS cross-compilation for iOS armv7

Question

I cross-compiled FIPS for armv7 using the instructions from http://opensslfoundation.com/testing/validation-2.0/platforms/ios/

I'm having difficulty cross-compiling the openssl dependency on fips.

I get the following error in the terminal.

/usr/local/ssl/fips-2.0/bin/fipsld: line 185: ./openssl: Bad CPU type in executable make[2]: *** [link_app.] Error 1 make[1]: *** [openssl] Error 2 make: *** [build_apps] Error 1 

This is because the openssl executable in the "/ apps" folder has the armv7 architecture. Since I cross-compile openssl, I only need libssl and libcrypto with armv7 architecture, other intermediate executables should build with i386 architecture.

Any help with setting environment variables is appreciated.

Answer 1

The OpenSSL FIPS 2.0 User Guide provides a comprehensive example of building a FIPS and FIPS Capable Library object module. It also offers an example iOS program to test your build. See Appendix E on page 122.

From the look (due to the link_app error), you did not install the environment properly using setenv-ios-11.sh . This made your assembly try to create executables (which should not be built in this configuration).