My question is, is this something we can get fixed ourselves, I doubt it, as changing anything will invalidate the FIPS validation. Or is this something that has not been 'done' by the FIPS development team. I'm afraid I have to convince my management that if it can't be done, why that is. I know Linux on S390 is not on the list of platforms that have been confirmed to work (and tested). If that's all there is to it, so be it, but I need to have that confirmed.
If you take a look at fips_canister.c, specifically instruction_pointer() and FIPS_ref_point() you'll see there is no S390 support. Obviously modifying that code would invalidate the FIPS module. I'd suggest if you need fips support, grab the 0.9.8 fips branch and see if that works, if it doesn't, submit a patch that properly implements S390 support. It won't make it into the current validation which is on-going for 0.9.8, but would make it into the next and my uneducated guess would say it'll take at least 18 months. -Brad ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]
