On Fri, Apr 07, 2006, Brad House wrote: > Hi, I've been playing around with the FIPS stuff, and figured I'd > mention a few things I've run into ... they may be bugs, or just > user error ;) >
Well some of the queries you have will be answered when the "user guide" is made available. I should note that many of the apparently unusual features were necessary to meet the FIPS requirments. The strange Windows build method was an indirect consequence of that. Under the constraints it was a case of either doing things that way or waiting for any followup certification which might be months away. I'd consider it a lot better than nothing. The Windows build isn't all that different from the "full" build for other paltforms. In outline the process will be: 1. Compile the FIPS module (fipscanister.o) from the validated source using the approved build procedure. 2. Compile a later version of OpenSSL which will link to the FIPS module in step #1. Note that step #1 (whic is the MSYS stuff on Windows) only has to be done once. Subsequent builds only need step #2. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [EMAIL PROTECTED]
