On Wed, 2006-06-07 at 14:59 +0530, Haridharan wrote: > I built OpenSSL 0.9.7j with FIPS complaint in hp-ux IA64 architecture. > > For OpenSSL-fips-1.0.tar.gz, built options used is > > * ./Configure fips hpux64-ia64-cc
Not that according to the security policy, the only command allowed for configuring in FIPS mode is "./config fips". No other options may be specified on the command line. As I understand it, if you do not configure it this way then the built module would not be considered FIPS validated. See section C.1 of the OpenSSL FIPS 140-2 Security Policy ( http://csrc.nist.gov/cryptval/140-1/140sp/140sp642.pdf ) Troy ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
