You have to use the openssl-fips-1.0 package to build the fipscanister,
then use the generated canister files by passing
--with-fipslibdir=
to the config line for openssl-0.9.7l
I don't think the fips distribution is available anymore because of
the current validation issues. I would like to have a status update
on if OpenSSL will be revalidated in the near future though if anyone
knows.
-Brad
Wei Weng wrote:
hi.
I downloaded openssl-0.9.7l and was trying to build it with FIPS mode set.
[EMAIL PROTECTED] openssl-0.9.7l]$ ./config fips
Operating system: i686-whatever-linux2
Configuring for linux-pentium
Configuring for linux-pentium
The file fipscanister.o could not be located. Please build and install the
FIPS module using the instructions in the user guide before compiling
OpenSSL
in FIPS mode.
I looked for the "instructions in the user guide" by going into doc/
directory and did a grep -ri fips, and nothing relevant came up.
What did I do wrong?
Thanks
Wei
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
