If you build the FIPS module as documented, it will create the fipscanister.o. If you then build a version of OpenSSL 0.9.8 that has FIPS support with the appropriate command-line option to build it and link it with fipscanister.o, you have a version of the library (and commandline tools) that will use the FIPS-validated canister.
The magic incantation to get the command-line tools to use the FIPS canister is: csh$ setenv OPENSSL_FIPS 1 bash$ export OPENSSL_FIPS=1 -Kyle H On Wed, May 20, 2009 at 1:02 AM, Mansoor Ali Khan <[email protected]> wrote: > Hi, > > > > I wanted to know if the openssl command line utility is available with the > FIPS 140-2 package. I mean would I still be able to run commands like > genrsa, genpkey etc. from the command line with openssl FIPS crypto module > doing all the work ? > > > > > > Regards, > > MAK > > ________________________________ > This email and any files transmitted with it are confidential and intended > solely for the use of the individual or entity to whom they are addressed. > If you have received this email in error please notify the author and delete > the email. Please note that any views or opinions presented in this email > are solely those of the author and do not necessarily represent those of the > organization. Finally, the recipient should check this email and any > attachments for the presence of viruses. HBL accepts no liability for any > damage caused by any virus transmitted by this email. > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
