On Thu, Mar 26, 2009, Uma G. Nayak wrote: > That was very clear and great help Kyle!! Even though I had spent time on > Security Policy earlier, the build procedure was not clear, atleast for me, > until now. > > If you wouldn't mind, could you answer one more question of mine? > > I want to use the libeay32.dll and ssleay32.dll from the above build in my > application. Now, is it sufficient if I use the Openssl-fips-1.2 dlls or > should I use it with Openssl-0.9.8j module? Because I had read about it in > one of the replies in this forum, that Openssl-fips-1.2 is to be used in > conjunction with Openssl-0.9.8j. >
Yes you should always use the 1.2 module in conjunction with the latest version of OpenSSL. The version of OpenSSL which came with the 1.2 tarball is an old version of 0.9.8 and many security and bug fixes have been made since then. > If this is true, should I build Openssl-0.9.8j using Openssl-fips-1.2 > libraries? Again what is the build procedure for this? > > I used to follow the below steps for Openssl-0.9.8j: > > perl Configure VC-WIN32 no-asm fips --with-fipslibdir=<path of > Openssl-fips-1.2 dlls> ms\do_ms vcvars32.bat nmake -f ms\ntdll.mak > Yes that's fine but use the latest 0.9.8k release. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org