> > I've previously been trying to cross compile openssl-fips version 1.2 for > > my MIPS target, following the guidance in the user's guide, security > > policy, and this mailing list. I don't see a crossbuild patch for version > > 1.2.2, nor any instructions in the 1.2.2 documentation. I'm wondering if > > there is a patch coming in the future, or if cross compilation is now > > "built in" without the need for a patch, or if cross-compilation is no
> > longer a supported option in version 1.2.2. > > > Cross compilation support is now included in the 1.2.2 tarball and so no patch > is needed. This is great news! I now have version 1.2.2 cross compiled and functional on my MIPS target. > I just checked the 1.2.2 tarball and the FIPS_SIG changes are there. > Steve. My apologies, Dr Henson. I was mistaken. Must have been a late night. You're correct, the FIPS_SIG changes are indeed present (and functional). The only thing I had to do was tweak to get my MIPS target working was tweak the INCORE_ADJUST variable in the 'incore' script (which I was using as FIPS_SIG). The default of 4 was giving me fingerprint mismatch errors (to be expected on a new file format). I'm not sure if the incore script is being maintained by anyone, but if so, hopefully they see this -- the code I'm using on this MIPS processor has a "file format", as reported by objdump, of "elf32-big", and the value "12" for the variable INCORE_ADJUST worked perfectly. Even if it's not being maintained, I'm sure people can find this post with the help of any major search engine. Thanks for setting me straight on the cross compile in 1.2.2!