Similar question.
With the problem
http://www.mail-archive.com/[email protected]/msg58527.html
In order to make fipslink.pl work with MKS perl, in fipslink.pl, if I make a
change
that add a line like below:
$sha1_exe =~ s/\\/\//g;
- After this change, fipslink.pl will work with MKS as well.
- Note that this is not a change to build FIPS Object Module,
but it is a change to build FIPS capable OpenSSL libraries.
After this change, is this resulting FIPS capable OpenSSL libraries still FIPS
compliant?
Susumu
----- Original Message ----
From: Dr. Stephen Henson <[email protected]>
To: [email protected]
Sent: Mon, October 11, 2010 3:16:46 PM
Subject: Re: Crosscompiling openssl-fips-1.2 for arm-linux - still FIPS
compliant?
On Mon, Oct 11, 2010, Ronald Wahl wrote:
> Hi,
>
> I'm currently trying to cross compile openssl-fips-1.2 for arm-linux on a
> x86 host. This does abort at a certain point. The problem has been already
> reported and solutions are provided. See here:
>
> http://www.mail-archive.com/[email protected]/msg59904.html
>
> I have not tried the solutions yet but my question is: If I do so - is the
> resulting module still FIPS compliant? The according SecurityPolicy
> document contains the statement:
>
> "Note that failure to use one of the specified commands sets exactly
> as shown will result in a module that cannot be considered compliant
> with FIPS 140-2."
>
> So my current assumption is that we probably could build the module but you
> can't actually call it FIPS compliant anymore which makes it rather
> useless. Is this correct?
>
The result *is* FIPS compliant: a change leter specifically supports cross
compilation as long as you use the specified commands. You should be able to
use them unmodified (using incore or a copying script) though you many need to
change the environment variables to match the target system.
Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
