On Thu, Oct 18, 2012, Mendonca, Joseph wrote:

> 
> Would it be possible to get some instructions to accomplish building the
> "ROM-based DLL"?  I would like to try that.  
> 
> 

Well you need a consistent load address for the DLL. If it isn't ROM based then
things like the load order can result in different addresses which will mess up
the signature.

So one (messy) way is to set up platform builder to get that consistent load
address: as long as it doesn't change it doesn't matter what it is. You can use
process viewer to check the load address.

Then once you're sure the address doesn't change you can  use that address when
you build the FIPS capable OpenSSL to embed the signature. This is the
--with-baseaddr=<address> option to Configure.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to