The other thing that you may have missed is that the tarball
'openssl-fips-1.1.1.tar.gz' should be used ONLY to build the FIPS modules
(which is the fipscansiter.o, an executable, a C source file and 2
signatures).  You then need to use the tarball 'openssl-0.9.7m.tar.gz'
(nothing before,nothing after) to build the FIPS enabled versions of the ssl
and crypto libraries.  You got a ways to still; just hang in there and
you'll have it all figured out.

HTH
  -----Original Message-----
  From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Paul Levin
  Sent: Friday, October 19, 2007 2:39 PM
  To: openssl-users@openssl.org
  Subject: problems with building the FIPS OpenSSL


  I am trying to build FIPS OpenSSL 1.1.1 for Windows, as per the
instructions in the UserGuide-1.1.1.pdf.
  For the most part it goes ok, but when I get to step 7, in section 4.3.2,
there are several problems.

    1.. there is no directory called /usr/local/ssl/lib in MSYS.
    2.. in step 10 I can find most of the files, but fips_premain.c.sha1 is
no where to be found
  The everything goes to h-ll when I try to build OpenSSL with the FIPS
addon.

    1.. I'm using the OpenSSL that is in the FIPS tar.  The User Guide
implies that I need to download some other version
    2.. The user guide says to use a --with-fipslibdir argument to perl
Configure.  That gives an invalid parameter error.
    3.. Following the instructions in the INSTALL_W32 file, I ran "perl
Configure VC-WIN32 fips". Then "ms\do_masm".  This gave several errors that
the FIPS files could not be found.

    4.. Looking at the perl script, I see it is looking in the top level
directory of the tar tree (openssl-fips-1.1.1) for the FIPS generated files.
The FIPS build did not put the files there.

      1.. I moved the files there and I'm still getting an error because the
fips_premain.c.sha1 file is not there.
  What needs to be done to build this?

      Thanks,
      Paul

  ______________________________________________________________________
OpenSSL Project http://www.openssl.org User Support Mailing List
openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]

Reply via email to