Jeremy Regan wrote:
Hello,
I was able to build the FIPS 1.2 software successfully using
./config --prefix=/apps/fips_build/fips-1.2-install fipscanisterbuild
no-asm
make
make install
Standard nag: you built it successfully in the sense that it compiled
and linked without error, but you can't represent the result as FIPS
140-2 validated. The Security Policy is very specific about the fact
that only two options to ./config are allowed, "no-asm" and
"fipscanisterbuild".
What you can do is build it as mandated and then copy the resulting
module where you want it to go. I know the difference seems silly, but
the CMVP was very adamant on that point when we were working the first
validation.
-Steve M.
--
Steve Marquess
Veridical Systems, Inc.
[email protected]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
