My own Win32 build procedure using MinGW went like this:
tar xvf openssl-fips-1.1.1.tar
cd openssl-fips-1.1.1
./config fips
make
make test
make install
THEN
tar xvf openssl-0.9.7m.tar
cd openssl-0.9.7m
./config fips --with-fipslibdir=/usr/local/ssl/lib
make
make test (do NOT skip the tests)
make install
FIPS capable openssl binaries in /usr/local/ssl/bin (the default
location). This is how I built OpenSSL-fips for windows.
Leonard
Paul Levin wrote:
I am trying to build FIPS OpenSSL 1.1.1 for Windows, as per the
instructions in the UserGuide-1.1.1.pdf.
For the most part it goes ok, but when I get to step 7, in section
4.3.2, there are several problems.
1. there is no directory called /usr/local/ssl/lib in MSYS.
2. in step 10 I can find most of the files, but fips_premain.c.sha1
is no where to be found
Then everything goes to h-ll when I try to build OpenSSL with the FIPS
addon.
1. I'm using the OpenSSL that is in the FIPS tar. The User Guide
implies that I need to download some other version
2. The user guide says to use a --with-fipslibdir argument to "perl
Configure". That gives an invalid parameter error.
3. Following the instructions in the INSTALL_W32 file, I ran "perl
Configure VC-WIN32 fips". Then "ms\do_masm". This gave several
errors that the FIPS files could not be found.
4. Looking at the perl script, I see it is looking in the top level
directory of the tar tree (openssl-fips-1.1.1) for the FIPS
generated files. The FIPS build did not put the files there.
1. I moved the files there and I'm still getting an error
because the fips_premain.c.sha1 file is not there.
What needs to be done to build this?
Thanks,
Paul
______________________________________________________________________
OpenSSL Project http://www.openssl.org User Support Mailing List
openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
--
Leonard F. Elia III, CISSP
Sr. System Administrator
ConITS - NASA Langley Research Center
NCI Information Systems, Inc., Hampton VA
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
