On Wed, Jul 18, 2012, AJ wrote:

> This explains it -- thank you -- I was using a static library -- so I would 
> need to use fipsld, if I continue to use static.  
> 
> However, knowing this, I wanted to try with shared OpenSSL library instead, 
> but my build fails on "multiple definition" errors.
> The only difference I made, was to add "shared" to the config line, when 
> building openssl-1.0.1c:
> 
>    ./config fips --with-fipslibdir=/usr/local/ssl/fips-2.0/lib/ shared
>    make depend
> 
>    make
> 
>    make install
> 
> 

Don't use --with-fipslibdir instead use --with-fipsdir instead or you can set
the FIPSDIR environment variable while building the validated module and the
FIPS capable OpenSSL.

So you'd instead do:

./config fips --with-fipsdir=/usr/local/ssl/fips-2.0 shared

I just tried this with my setup and it worked OK.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [email protected]

Reply via email to