Re: Which tar.gz file I need for OpenSSL FIPS Object Module?

2011-07-18 Thread Kyle Hamilton
The Security Policy is the document you need. Please see Steve Marquess's link to the official copy at NIST. The Security Policy explains everything, including what file you need to obtain, its HMAC, how to verify it, what you must do to retain validation of the canister, how to build the caniste

Which tar.gz file I need for OpenSSL FIPS Object Module?

2011-07-17 Thread Tatiana Evers
Hi, I'm using openssl (openssl-0.9.8r.tar.gz ) in a project, and now we want certificate the software with FIPS certification, my question is if we must have openssl-fips-1.2.3.tar.gz to use OpenSSL FIPS Object Module? In openssl-0.9.8r.tar.gz project we already some fips files. What is the di

Re: Which tar.gz file I need for OpenSSL FIPS Object Module?

2011-07-15 Thread William A. Rowe Jr.
On 7/15/2011 6:48 PM, Tatiana Evers wrote: > Hi Steve, > > I want my software be FIPS 140-2 validated, not just experiment with source. > The Security > Policy document point me to use openssl-fips-1.2.3.tar.gz. Should I > remove openssl-0.9.8r.tar.gz? You cannot build the FIPS canister from o

Re: Which tar.gz file I need for OpenSSL FIPS Object Module?

2011-07-15 Thread Tatiana Evers
Hi Steve, I want my software be FIPS 140-2 validated, not just experiment with source. The Security Policy document point me to use openssl-fips-1.2.3.tar.gz. Should I remove openssl-0.9.8r.tar.gz? Regards, Tatiana 2011/7/15 Steve Marquess > ** > > Hi, > > > > I'm using openssl (*openssl-0.9.

Re: Which tar.gz file I need for OpenSSL FIPS Object Module?

2011-07-15 Thread Steve Marquess
> Hi, > > I'm using openssl (*openssl-0.9.8r.tar.gz *) in a project, and now we > want certificate the software with FIPS certification, my question is > if we must have *openssl-fips-1.2.3.tar.gz* to use OpenSSL FIPS > Object Module? In * openssl-0.9.8r.tar.gz* project we already some > fips files

Which tar.gz file I need for OpenSSL FIPS Object Module?

2011-07-15 Thread Tatiana Evers
Hi, I'm using openssl (openssl-0.9.8r.tar.gz ) in a project, and now we want certificate the software with FIPS certification, my question is if we must have openssl-fips-1.2.3.tar.gz to use OpenSSL FIPS Object Module? In openssl-0.9.8r.tar.gz project we already some fips files. What is the di

Which tar.gz file I need for OpenSSL FIPS Object Module?

2011-07-15 Thread Tatiana Evers
Hi, I'm using openssl (*openssl-0.9.8r.tar.gz *) in a project, and now we want certificate the software with FIPS certification, my question is if we must have *openssl-fips-1.2.3.tar.gz* to use OpenSSL FIPS Object Module? In * openssl-0.9.8r.tar.gz* project we already some fips files. What is th