Steve, Thanks for the response.
Would it be possible to get some instructions to accomplish building the "ROM-based DLL"? I would like to try that. Our other option would be to build a statically link application, although I am still not sure how to generate the signature and link it into the app in a cross-compile (Platform Builder) environment. I had tried to use the /fixed switch and wound up with an unusable DLL. Thanks, Joe PS. Someone else here has successfully built and used the Linux version on a similar hardware platform. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Dr. Stephen Henson Sent: Thursday, October 18, 2012 2:13 PM To: [email protected] Subject: Re: Need help building FIPS capable Openssl for Windows CE On Thu, Oct 18, 2012, Andy Polyakov wrote: > > >Has this been done successfully for Windows CE? > > Yes, but not with dll. Even though do_fips.bat from FIPS module source > refers to cedll.mak, validation is performed with statically linked > applications. Probably one shouldn't have referred to cedll.mak to > avoid confusion. I don't know all the details, but I'd guess it was > chosen in order to keep modifications to *absolute* minimum. But it's > of lesser relevance, because once you've got fipscanister.lib, you can > use it in context of your liking. Of course provided that your liking > is within limitations imposed by fingerprinting. Which in CE context > [unfortunately] are "forget about dll [or maybe go for rom-based]." The CE 5 build used a ROM-based DLL and some flags set in platform builder. A normal DLL wouldn't work: it ignored the load address and setting /FIXED stopped it loading altogether. I believe CE 6 (wasn't directly involved with that myself though) is friendlier and doesn't need platform builder tweaks or a ROM based DLL. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected] ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
