Hi all.

I want to know whether this is correct in building a FIPS capable openSSL binaries.

download openssl-fips-1.1.1.tar.gz and openssl-0.9.7l.tar.gz, unzip them into their own directories.

cd openssl-fips-1.1.1, do

./config fips --prefix=/opt/fips

and make; make install is going to install fips_canister.o inside /opt/fips/lib directory.

cd openssl-0.9.7l, do

./config shared --with-fipslibdir=/opt/fips/lib/ --openssldir=/opt/openssl-0.9.7l/

and make; make install is going to put FIPS capable openssl binaries into /opt/openssl-0.9.7l/

Is this correct? Thanks in advance.


Wei

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to