Hi.
I am compiling OpenSSL with the FIPS options and seeing a build error.
My question is more about the intent than the problem.
One example: When apps/speed.c is compiled with FIPS enabled,
OPENSSL_FIPS is defined and DES_set_key_unchecked gets defined to be
private_DES_set_key_unchecked.
The use of the private_ function means that fips_cipher_abort is not called.
Am I correct that the intent is to allow the OpenSSl-provided apps to
use the low level APIs (like DES) while user applications linking with
libcrypto.so can not?
The problem is that the OpenSSL-provided apps also link with that
library and the private_ functions are not global (they are not in
openssl.ld). So the OpenSSL-provided apps fail to link. In the above
example, apps/speed.c can't find private_DES_set_key_unchecked().
Or am I not understanding the intent?
Regards,
Steve
_______________________________________________
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev
