Hello OpenSSL developers.
I could not understand "*Check-in [22619]* Reduce version skew" in
openssl 1.0.1 stable branch. May be this version adds some useful
improvements but FIPS build(compile) is broken. I wonder what is policy
to update 1.0.1 "stable" branch.
After remove of #include <openssl/crypto.h> some sources cannot be
compiled(fips build). It is not enough just to restore '#include
<openssl/crypto.h> is some sources. Note that check-in add "return
RAND_SSLeay()->add(in, inlen, entropy);" but add(...) is void function
in this context. Another issue could be that some C-files does not
include #include "evp_locl.h" that redefine FOO to private_FOO in FIPS
build. The last 1.0.1 stable that could be build in FIPS mode is from
2012-06-07 This bevsion pass tests. Please revert check-in 226109 in
1.0.1 branch . Lets test it in 1.0.2 first.
About 1.0.2 stable branch, FIPS build until 2012-05-12 in is fine and
all test pass.
Also all current non FIPS build are not affected in both branches as the
tests pass.
Roumen
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [email protected]
