You can not use the "shared" option for the fips module (1.1.1)
You are only supposed to use the "fips" option, which will build a
single fips canister object file. This object file can then be used to
link into your openssl build (eg. 0.9.7m).
For openssl itself, you _should_ be able to use
he API
against, even if everything's stubbed out. :P)
I do have to ask, though: is this one going to compile properly on
Intel-based Macs? 1.1 and 1.1.1 didn't.
-Kyle H
On Nov 29, 2007 5:22 PM, Brendan Simon < [EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>> wrote:
Where
Where can I find information about OpenSSL FIPS Object Module v1.2 ???
Where can this be downloaded from? CVS only? Or are there tarballs
somewhere?
Where does FIPS related development/discussion take place? Just the
users mailing list?
Is there a spot on the website dedicated to FIPS relate
rary
trivially behaves as the traditional openssl (with all
functionalities). The former is called FIPS-validated App and latter
is FIPS-capable App.
On Nov 29, 2007 4:22 PM, Brendan Simon <[EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>> wrote:
Hi,
I require FIPS functional
Hi,
I require FIPS functionality in OpenSSL but I do NOT have a requirement
to run in FIPS mode.
What I would like is to build OpenSSL and have ALL functions available
to me so I can choose which ones I want to use. At the moment there are
some functions that are only available if the -fips
I want to use the RSA_X931_generate_key() function as part of a dynamic
library, but it seems to only be available when using fips mode and
presumably the fipscanister. The codes is surrounded by "#ifdef
OPENSSL_FIPS".
I'm happy to use the fipscansister, but it seems that both
openssl-fips-1
David Schwartz wrote:
I'm happy to use the fipscansister, but it seems that both
openssl-fips-1.1.1 and openssl-0.9.7m both fail building if configured
using "./config fips shared".
Why are you trying to build the FIPS canister with anything other than
"./config fips"?
Without the "sh
I want to use the RSA_X931_generate_key() function as part of a dynamic
library, but it seems to only be available when using fips mode and
presumably the fipscanister. The codes is surrounded by "#ifdef
OPENSSL_FIPS".
I'm happy to use the fipscansister, but it seems that both
openssl-fips-1.1.1
I can't even build openssl-fips.1.1.1 if the "shared" option is
specified. I had to remove it as you (Bill) did for the openssl-0.9.7m.
My build host is an oldish Debian (Woody) PowerPC box.
$ uname -a
Linux larabee 2.4.25-powerpc #1 mer avr 14 15:38:38 CEST 2004 ppc unknown
Why does "shared
Does anyone know how to get a daily digest version of this mailing
list. Mailman supports digests but I am not familiar with Majordomo. I
tried the support page of the website but could not find any relevant info.
Thanks,
Brendan.
_
that will
intereoperate with other openssl crypto functionality.
Hopefully someone can answer my questions or point me in the right
direction.
Cheers,
Brendan Simon.
__
OpenSSL Project http
that a correct interpretation?
3) If I am wrong and it is allowed to use openssl in kernel modules,
then how does one stop system header files interfering with kernel/linux
header files ??? eg. files, etc.
Cheers,
Brendan Simon.
(Please CC me as well as the
12 matches
Mail list logo