Using FIPS module and FIPS capable OpenSSL (2.0/1.0.1) on a NetBSD platform.
I build FIPS module by hand to follow the build instructions, and copy it into a tips sub-directory in openssl directory. I would like to build the libcrypto.so library as part of the NetBSD cross-compile build (i.e., launched from src/lib/libcrypto/Makefile), so it can be built as needed for different processors. NetBSD uses its own makefile approach using perl scripts to launch builds, and using generic src/share/mk/bsd.*.mk makefiles. I was thinking I could modify only the lib/libcrypto/Makefile file and leave the generic makefiles alone, but am struggling with the final linking step rules using fipsld. Has anyone else done this in NetBSD builds? Alternatively, I could also build the library by hand and coax the main build into just installing libcrypto.so instead of building it. Suggestions welcome! I've searched but cannot find any sign of anyone coping with similar issues. Kevin
