On 10/28/2013 12:38 AM, Sg, Prasad (STSD) wrote: > Hi, > > I am trying to get a FIPs certifier version of openssl built on > HP-UX I64 11.31. > > The build of FIP's module is successful and i could even use it > to build openssl (libcrypto.so.1.0.0). > > I was looking if anybody could check the steps used and confirm > that the final built openssl is can be stated as FIPs certified. > > I am looking more towards the below questions: > > 1.) Is the version of compiler used okay? > I have used latest version. The bundle name is B9007AA. > However, if I do a "what /opt/aCC/bin/cc" I see the string > has B3910B, which is the same mentioned in the > OpenSSL Security policy.
While the compiler used for the formal platform testing is listed in the Security Policy, use of that specific version is not required. > 2.) I had to do a "export KERNEL_BITS=32" before building > the 32 bit variant of files. Some of the OpenSSL email archives > suggests that this is valid and can be used. > > ... Correct, that's what we did for the formal testing: http://opensslfoundation.com/testing/validation-2.0/platforms/hpux/setenv-hpux.sh -Steve M. -- Steve Marquess OpenSSL Software Foundation, Inc. 1829 Mount Ephraim Road Adamstown, MD 21710 USA +1 877 673 6775 s/b +1 301 874 2571 direct marqu...@opensslfoundation.com marqu...@openssl.com gpg/pgp key: http://openssl.com/docs/0xCE69424E.asc ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
