Re: Openssl Fips Shared Library

2008-09-22 Thread joshi chandran
Can u please tell me what FIPS_set_mode() returns when i am using it will the FIPS_set_mode(1), returns 1 and also when using FIPS_set_mode(1), returns 1 So how can i come out of fips mode once it is entered, how can i come out of fips mode . can u please explain it will sample program. Thank

Re: Openssl Fips Shared Library

2008-09-22 Thread Tim Hudson
joshi chandran wrote: Can u please tell me what FIPS_set_mode() returns when i am using it will the FIPS_set_mode(1), returns 1 and also when using FIPS_set_mode(1), returns 1 FIPS_mode_set() returns 1 on success and 0 on failure. FIPS_mode() returns the current mode. Tim. PGP.sig

Re: Openssl Fips Shared Library

2008-09-19 Thread joshi chandran
How to link fipsld linking to set the in-core hash. can u please tell me how to link fipsld to the fips module. when i am using fipsld it is showing no -o specified $ sh fipsld no -o specified can u please tell me wat does -o indicate here and please give the list of other options and there

Re: Openssl Fips Shared Library

2008-09-19 Thread Kyle Hamilton
use 'fipsld' the same way you would use your system-provided ld. It requires a list of input files and a -o to set the name of the output file. -Kyle H On Fri, Sep 19, 2008 at 7:53 AM, joshi chandran [EMAIL PROTECTED] wrote: How to link fipsld linking to set the in-core hash. can u please

Re: Openssl Fips Shared Library

2008-09-18 Thread Patrick Patterson
Hi Joshi: On September 18, 2008 11:01:28 am joshi chandra wrote: Hi I was trying to build shared library of fips and i am facing some problem with that .This is the step i have done 1. I have created the fips object module (used openssl fips 1.1.2) 2. Used openssl 0.9.7m to create fips

Re: Openssl Fips Shared Library

2008-09-18 Thread joshi chandra
I have followed the step mention in OpenSSL FIPS Security Policy for openssl fips 1.1.2 and that all work fine. But when i started working on fips capable openssl using openssl 0.9.7m and used the shared option in the ./Configure,it is giving the error but work fine when not using shared option

Re: Openssl Fips Shared Library

2008-09-18 Thread Dr. Stephen Henson
On Thu, Sep 18, 2008, joshi chandra wrote: I have followed the step mention in OpenSSL FIPS Security Policy for openssl fips 1.1.2 and that all work fine. But when i started working on fips capable openssl using openssl 0.9.7m and used the shared option in the ./Configure,it is giving the

RE: Openssl Fips Shared Library

2008-09-18 Thread Carlo Milono
Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: Thursday, September 18, 2008 7:48 AM To: openssl-users@openssl.org Subject: Re: Openssl Fips Shared Library On Thu, Sep 18, 2008, joshi chandra wrote: I have followed the step mention in OpenSSL

Re: Openssl Fips Shared Library

2008-09-18 Thread Steve Marquess
Carlo Milono wrote: How curious that this topic would come up today as I had a discussion on it just two days earlier. The OpenSSL FIPS 140-2 Security Policy Version 1.1.2 states: The FIPS Object Module is not a static library. It may be incorporated into shared library files or runtime

Re: Openssl Fips Shared Library

2008-09-18 Thread joshi chandra
when i have used shared option in the ./Configure , i was able to compile the openssl 0.9.7m successfully but when i tested the fips function in the test folder ,that time it was producing the error message and when i removed shared option by no-shared option in the ./Configure command in the

Re: Openssl Fips Shared Library

2008-09-18 Thread joshi chandran
Is this openssl fips 1.1.2 module generate position independent code ? If so then i can inappropriate it in shared library generated by openssl 0.9.7m Thanks Joshi IOn Thu, Sep 18, 2008 at 11:18 PM, joshi chandra [EMAIL PROTECTED] wrote: when i have used shared option in the ./Configure

Re: Openssl Fips Shared Library

2008-09-18 Thread joshi chandran
How to find out whether openssl fips1.1.2 generate position independent code or not Please help me out Thanks Joshi IOn Thu, Sep 18, 2008 at 11:18 PM, joshi chandra [EMAIL PROTECTED] wrote: when i have used shared option in the ./Configure , i was able to compile the openssl 0.9.7m