Re: FINGERPRINT_premain not called?

2012-03-17 Thread Kevin Fowler
Understood. I asked in part because I want to minimize the number/scope of modifications so that the change letter validation is viable and straightforward; and, I asked out of curiosity. Kevin On Sat, Mar 17, 2012 at 12:26 PM, Andy Polyakov wrote: >> Is incore part of the validation, or is it li

Re: FINGERPRINT_premain not called?

2012-03-17 Thread Andy Polyakov
> Is incore part of the validation, or is it like fipsld - allowed to be > modified as needed without invalidating FIPS certification? It shouldn't void certification, no. But why is it concern for you? You have to aim for change letter and therefore there is window for including even this modific

Re: FINGERPRINT_premain not called?

2012-03-10 Thread Kevin Fowler
Thanks Andy, helpful as always. Is incore part of the validation, or is it like fipsld - allowed to be modified as needed without invalidating FIPS certification? Kevin On Sat, Mar 10, 2012 at 3:44 AM, Andy Polyakov wrote: >> While investigating this I realized I did not really know when >> FIN

Re: FINGERPRINT_premain not called?

2012-03-10 Thread Andy Polyakov
> While investigating this I realized I did not really know when > FINGERPRINT_premain is supposed to be called. With my small app I see > it get called when I execute the app (because I stuck some debug > printfs in fips_premain.c). But with the main app - which is called by > some system startup

FINGERPRINT_premain not called?

2012-03-09 Thread Kevin Fowler
I have successfully cross-compiled a FIPS_capable libcrypto.a for my target (NetBSD on PowerPC), and successfully built the FIPS tests and run them on the target - all pass/fail as expected. I also built a simple app and built that with the library, and ran that successfully. I have (see other thre