[meta-xilinx] Openssl incompatible compression

Fri Jul 27 14:08:11 PDT 2018

> -----Original Message-----
> From: meta-xilinx-bounces at yoctoproject.org [mailto:meta-xilinx-
> bounces at yoctoproject.org] On Behalf Of Nathan Rossi
> Sent: Tuesday, July 24, 2018 11:14 PM
> To: Maarten Brock <m.brock at vanmierlo.com>
> Cc: meta-xilinx at yoctoproject.org
> Subject: Re: [meta-xilinx] Openssl incompatible compression
> 
> On 25 July 2018 at 02:11, Maarten Brock <m.brock at vanmierlo.com> wrote:
> > Hello all,
> >
> > I'm new to this mailing list, so forgive me if I post this question in the
> > wrong place.
> >
> > I'm using Petalinux 2018.2 on a Zynq which comes with openssl 1.0.2l and I
> > want to exchange encrypted files with an x86 linux which has openssl 1.0.2g.
> > I use aes256 for encryption. However the Zynq gives 'bad decrypt' error
> > messages when trying to decrypt the files from the x86. The same goes vice
> > versa.
> >
> > I also tried with openssl 1.0.2g and openssl 1.0.2o on windows. Works fine
> > with x86 linux, but not with the Zynq.
> >
> > Then I compiled openssl 1.0.2p from source for the Zynq and that also works.
> >
> > In short, it's the openssl that petalinux/yocto provides that is
> > incompatible.
> >
> > Going back to an older petalinux 2017.4 which has openssl 1.0.2j also works
> > as expected.
> >
> > Is this a known problem that is maybe already fixed? I couldn't find any
> > mention of it.
> 
> So I am not sure on the specifics on the PetaLinux side. But in
> oe-core there was a armv7 issue with binutils 2.29 and openssl which
> was patched in the sumo branch. But it sounds like the same issue you
> are describing (aes related).
> 
> It affected both versions of openssl (1.0.2m and 1.1.0g)
> http://git.openembedded.org/openembedded-
> core/commit/?id=977db3843b629112539d3eb766c845127c0de497
> http://git.openembedded.org/openembedded-
> core/commit/?id=e76dcfbd6e1ad6fc147a0607dcdaf8e7ea98b610
> 

The above patches were not present in Rocko v2.4.1 (PetaLinux 2018.2 uses this version). The newer release of Rocko v2.4.2 has included this fix and should be in PetaLinux 2018.3

Thanks,
Manju