On Fri, Apr 07, 2006, Brad House wrote:

> Hi, I've been playing around with the FIPS stuff, and figured I'd
> mention a few things I've run into ... they may be bugs, or just
> user error ;)
> 

Well some of the queries you have will be answered when the "user guide" is
made available.

I should note that many of the apparently unusual features were necessary to
meet the FIPS requirments.

The strange Windows build method was an indirect consequence of that. Under
the constraints it was a case of either doing things that way or waiting
for any followup certification which might be months away. I'd consider it a
lot better than nothing.

The Windows build isn't all that different from the "full" build for other
paltforms. In outline the process will be:

1. Compile the FIPS module (fipscanister.o) from the validated source using
the approved build procedure.

2. Compile a later version of OpenSSL which will link to the FIPS
module in step #1.

Note that step #1 (whic is the MSYS stuff on Windows) only has to be done once.
Subsequent builds only need step #2.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to