Hello All,
I have used the below steps to integrate openssl-fips2.0.9 in openssl-1.0.2c :
Procedure for FIPS Enabled OpenSSL Module Compilation
=====================================================
=================================
1. Compile openssl-fips2.0 module
=================================
a. Extract the contents of openssl-fips-2.0.9tar.gz to
C:\openssl-fips-2.0.9\
b. Open Visual Studio 2008 Command Prompt.
c. cd C:\openssl-fips2.0.9\
d. Copy all the contents of "C:\Program Files\NASM" in this source
folder
e. ms\do_fips [no-asm] (nmake -f ms\ntdll.mak & nmake -f ms\ntdll.mak
install are included in this command)
Compiled FIPS module is located at C:\usr\local\ssl\fips-2.0.9
=======================================================
2. Integrate compiled openssl-fips2.0.9 in openssl-1.0.2c
=======================================================
a. Extract the contents of openssl-1.0.1e.tar.gz to
C:\openssl-1.0.2c-fips-compliant\
b. Open Visual Studio 2008 Command Prompt.
c. cd C:\openssl-1.0.2c-fips-compliant\
d. Copy all the contents of "C:\Program Files\NASM" in this source
folder
e. perl Configure VC-WIN32 fips
--with-fipslibdir=C:\usr\local\ssl\fips-2.0.9
f. ms\do_nasm
g. nmake -f ms\nt.mak
h. For Testing, use the following command: nmake -f ms\nt.mak test
i. nmake -f ms\nt.mak install
j. (If you want to create DLL files then Use the following commands
nmake -f ms\ntdll.mak && nmake -f ms\ntdll.mak install)
k. Compiled FIPS compliant OpenSSL exe is located at
C:\usr\local\ssl\bin\openssl.exe
l. Run C:\usr\local\ssl\bin\openssl.exe and type "version". You will be
confirmed to get the following output.
=======================================
****OpenSSL 1.0.2c-fips 12 June 2015****
=======================================
m. Compiled FIPS compliant OpenSSL fipslibeay32.lib, ssleay32.lib &
libeaycompat32.lib are located at C:\openssl-1.0.1e-fips-compliant\out32
n. Compiled FIPS compliant OpenSSL fipslibeay32.dll & ssleay32.dll are
located at C:\openssl-1.0.1e-fips-compliant\out32
Build is successful and able to generate fipslibeay32.lib, ssleay32.lib,
libeaycompat32.lib & ssleay32.dll.
But fipslibeay32.dll is missing. Please guide me .
Thanks&Regards
Ashwini V Patil
_____________________________________________
From: Patil, Ashwini IN BLR STS
Sent: Wednesday, July 01, 2015 11:55 AM
To: '[email protected]'
Subject: Openssl 1.0.2c include the FIPS 140-2 Object Module
Hello All,
Please let me know if openssl-1.0.2c include FIPS 140-2 Object Module.
Also please explain how to validate the application.
Your help is appreciated.
With best regards,
Ashwini V Patil
Siemens Technology and Services Private Limited
CT DC AA HC H1-FH STD IBP 6
84, Hosur Road
Bengaluru 560100, Indien
Mobil: +91 9008132565
mailto:[email protected]
http://www.siemens.co.in/STS
Registered Office: 130, Pandurang Budhkar Marg, Worli, Mumbai 400 018.
Telephone +91 22 39677000. Fax +91 22 39677075. Other Offices: Bengaluru,
Chennai, Gurgaon, Noida, Pune. Corporate Identity number:U99999MH1986PLC093854
_______________________________________________
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev
