Help - Building OpenSSL FIPS for 64 bit Android

[Rakesh Parihar]

Hi All,

I am seeking help on generating FIPS compliance OpenSSL libs for Android Native 
Application.
I am trying to build openssl-1.0.2t with the FIPS module openssl-fips-2.0.16 to 
support 64-bit android devices, I have tried following the steps on the Openssl 
wiki  and didn't 
found any specific verson dependency for 64bit support for android with FIPS.
I also tried using a script 
 found on GitHub that 
combines the building of the FIPS module and Openssl, I seem to be having 
issues with this as well. I have tried with many Openssl and FIPS versions to 
build for 64bit but not luck.
Any pointers regarding the 64bit supported version of Openssl and FIPS module 
for Andorid and any help in building a FIPS compliant Openssl would be 
appreciated.


Thanks & Regards


Rakesh Parihar

Sr. Software Engineer

rakesh.pari...@encora.com 
Ahmedabad, IN

[cid:86f62ca2-6ce9-4cc1-8932-c67a8cd82e85]
encora.com

Re: help - building OpenSSL fips for 64 bit Android

[Salz, Rich via openssl-users]

>that the setenv-android.sh script doesn't account for 64 bit architectures.

Correct.  The current FIPS module has not been modified for quite some time, 
and your platform is not supported.

If you cannot follow the steps *exactly* you cannot claim FIPS validation.  The 
OpenSSL project is working on a new FIPS validation for the next release, but 
it will only support a few platforms (those of the sponsors funding the work, 
mainly).  Whichever release you use, you will have to hire a lab to get your 
own validation, or hope that a vendor provides one.

Re: help - building OpenSSL fips for 64 bit Android

[chrisfahlin]

Forgot to mention I am trying to cross compile on a MacBook Pro (15-inch,
2017) running MacOS 10.14.5



--
Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html

help - building OpenSSL fips for 64 bit Android

[chrisfahlin]

I am trying to build openssl-1.0.2s with the fips module
openssl-fips-ecp-2.0.16 to support 64 bit android devices, I have tried
following the steps on the  wiki
   and noticed
that the setenv-android.sh script doesn't account for 64 bit architectures.
I have tried finding an updated version of the script online but none of
them seem to be working. I also tried using a  script
   found on GitHub
that combines the building of the fips module and openssl, I seem to be
having issues with this as well.

Any pointers in building a fips compliant openssl for 64 bit android would
be appreciated



--
Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html