On Oct 25, 2011, at 4:17 AM, Dr. Stephen Henson wrote: > On Mon, Oct 24, 2011, Bill Durant wrote: > >> On Oct 24, 2011, at 4:00 PM, Dr. Stephen Henson wrote: >>> On Mon, Oct 24, 2011, Bill Durant wrote: >>> >>>> >>>> >>>> Hello Steve: >>>> >>>> I downloaded >>>> ftp://openssl.org/snapshot/openssl-fips-2.0-test-20111023.tar.gz and >>>> http://openssl.org/source/openssl-0.9.8r.tar.gz. >>>> >>>> I am getting the following compile errors. Any ideas on what I am doing >>>> wrong? >>>> >>> >>> You can't use OpenSSL 0.9.8 with the test 2.0 tarball. You have to use and >>> OpenSSL 1.0.1 snapshot. >> >> Hello Steve, >> >> Thank you for the clarification. Now I am unable to get past 'nmake -f >> ms\nt.mak' >> >> Attached is the build log. >> >> I downloaded the following: >> >> ftp://ftp.openssl.org/snapshot/openssl-1.0.1-stable-SNAP-20111024.tar.gz >> ftp://ftp.openssl.org/snapshot/openssl-fips-2.0-test-20111024.tar.gz. >> >> I am getting the following compilation error. Any ideas on how to fix it? >> Thanks. >> >> C:\> cd openssl-fips-2.0-test-20111024 >> C:\> ms\do_fips no-asm >> ... >> ... >> *************************** >> ****FIPS BUILD SUCCESS***** >> *************************** >> >> C:\> cd ..\openssl-1.0.1-stable-SNAP-20111024 >> >> C:\> perl Configure VC-WIN32 fips >> --with-fipslibdir=..\openssl-fips-2.0-test-20111024\out32dll >> --prefix=..\openssl-1.0.1-stable-SNAP-20111024-fips-static no-idea no-mdc2 >> no-rc5 no-asm >> ... >> ... >> >> C:\> ms\do_nasm >> ... >> ... >> C:\> nmake -f ms\nt.mak >> ... >> ... >> cl /Fotmp32\o_fips.obj -Iinc32 -Itmp32 /MD /Ox /O2 /Ob2 -DOPENSSL_THREADS >> -DDSO_WIN32 -W3 -WX -Gs0 -GF -Gy -nologo -DOPENSSL_SYSNAME_WIN32 >> -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -D_CRT_SECURE_NO_DEPRECATE >> -Isrocalslips-2.0/include -DOPENSSL_NO_IDEA -DOPENSSL_NO_RC5 >> -DOPENSSL_NO_MD2 -DOPENSSL_NO_MDC2 -DOPENSSL_NO_KRB5 -DOPENSSL_FIPS >> -DOPENSSL_NO_JPAKE -DOPENSSL_NO_DYNAMIC_ENGINE /Zl /Zi /Fdtmp32/lib -c >> .\crypto\o_fips.c >> o_fips.c >> crypto\o_fips.c(60) : fatal error C1083: Cannot open include file: >> 'openssl/fips.h': No such file or directory >> NMAKE : fatal error U1077: 'cl' : return code '0x2' >> Stop. >> > > Set the FIPSDIR environment variable to a location where you want the module > installed before you call ms\do_fips and then don't include the > --with-fipslibdir option to Configure.
Hello Steve, That worked perfectly. Thanks. I am now able to produce a working FIPS-capable OpenSSL that works on Windows NT. Thanks! Bill > > Steve. > -- > Dr Stephen N. Henson. OpenSSL project core developer. > Commercial tech support now available see: http://www.openssl.org > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
