|
Hi ,
I am building FIPS compliant OpenSSL in HP-UX PA
11.11 architecture. I was build the FIPS module from the source with the
security policy 140-2 suggested in the FIPS user guide.
The steps followed to build the FIPS module
are
./config fips
make
make install
The steps followed to build FIPS
enabled OpenSSL are
./Configure threads zlib
shared fips no-rc5 no-idea no-krb5 --openssldir=/opt/openssl
hpux-cc
gmake
depend
gmake
While building the FIPS enabled OpenSSL, i was
thrown into the following error.
+ fips-1.0/fipsld -b +Z
-Wl,-B,symbolic,+vnocompatwarnings,-z,+h,libcrypto.sl.0.9.7 -o
libcrypto.sl.0.9.7 -Wl,-Fl,libcrypto.a -ldld
Canister: /usr/local/ssl/lib/fipscanister.o /usr/ccs/bin/ld: DP relative code in file /usr/local/ssl/lib/fipscanister.o - shared library must be position independent. Use +z or +Z to recompile. gmake[4]: *** [do_hpux-shared] Error 1 If we remove the shared in
the configure option it will be fixed. But it will not create the openssl shared
libraries. Is there any way to overcome this issue with shared
enabled, and also can we able to set some
compiler options while buiding FIPS
module? If yes, please guide me how to do?.
Thanks in advance
-siva
|
