On Thu, May 04, 2006, BAO, ROBERT wrote:
> Hi,
>
> >
> > However, when I tried to build the fips version (perl Configure VC-CE
> > fips), I got this error:
> > ***FIPS module directory sanity check failed***
> > FIPS module build failed, or was deleted
> > Please rebuild FIPS module.
> >
> > I found a useful discussion thread ("Compilation of OpenSSL-fips-1.0 under
> > Windows" 03/30/06), and realized that people have to use MSYS and gcc to
> > compile fips module first, etc.
> >
Yes that's correct. The build instructions have to be followed to the letter
for the validated FIPS module. That's why the MSYS stuff is there.
> > My questions are:
> > 1. Do we have to use the same "trick" to compile the fips module for
> > WinCE?
> > 2. Can we use Microsoft WinCE Platform Builder's ARM compiler to achieve
> > this?
> > 3. If we do have to use MSYS and/or gcc, they should be the ARM's version
> > right? Where can I get it if there exists one?
> >
You can't change a single thing in the fips validated source so anything that
requires changes there will not be validated.
It could be changed for a followup certification effort though. Contact OSSI
if you are interested in that.
The existing source works under Windows because a Unix-like compilation
environment (MSYS+mingw) can correctly compile OpenSSL *and* the result can be
used with VC++. You'd have to be able to achieve the same thing under ARM and
WinCE.
Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
