The results from the openssl-fips step:
[root@pdclab01] /usr/local/ssl/fips-1.0/bin # ./openssl version
OpenSSL FIPS Object Module v1.2
Good so far. The results from
Config fips
Make
Make install
On openssl 0.9.8w:
[root@pdclab01] /usr/local/ssl/fips/bin # ./openssl version
exec(): 0509-036 Cannot load program ./openssl because of the following
errors:
0509-022 Cannot load module
/usr/local/ssl/fips/lib/libcrypto.so.
0509-150 Dependent module libgcc_s.a(shr.o) could not be
loaded.
0509-022 Cannot load module libgcc_s.a(shr.o).
0509-026 System error: A file or directory in the path name does
not exist.
0509-022 Cannot load module openssl.
0509-150 Dependent module /usr/local/ssl/fips/lib/libcrypto.so
could not be loaded.
0509-022 Cannot load module .
The system is AIX 6.1.5 SP1 using gcc 4.4.5.
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Dr. Stephen Henson
Sent: Wednesday, May 30, 2012 8:13 AM
To: [email protected]
Subject: Re: Help with openssl FIPS on AIX
On Wed, May 30, 2012, Brewster, Scott wrote:
>
> I am not sure how I should interpret this - do I expand the 0.9.8w tar
> file into the same directory as were I did the openssl-fips? Do I
> just expand 0.9.8w.tar into its own directory and proceed with the
> config fips, make and make install steps (this is what I have tried
> previously. It results in errors when attempting to run openssl to
> get its version)?
>
The latter: you extract 0.9.8w into a separate directory and do:
./config fips
instead of:
./config
OpenSSL should then pick up and use the validated module you installed
before to generate a so called "FIPS capable OpenSSL" that is a version
of OpenSSL that makes use of the validated module.
If you get errors please give details of what they are.
Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
