gt; capable so that I can link libcurl against the library, since libcurl
> uses openssl library to do the decode/encode stuff.
>
> I am guessing that I will need to build my own openssl library that
> linked against FIPS module.
>
> Is that right?
>
>
> Thanks
>
>Short answer; no. There's more to running an application in FIPS approved mode
>than just
>linking against a properly generated fipscanister.o. Please refer to the
>definitive
>reference, the Security Policy
>(http://csrc.nist.gov/cryptval/140-1/140sp/140sp733.pdf),
> especially sections 4 an
Wei:
My current guess is that if all you are trying to do is get an openssl utility
that is FIPS
certified, then doing
./config fips
make
make install
from inside the top level directory of openssl-fips-1.1.1 is all that is
required.
If you want an openssl utility of a more recent 0.
--- Christopher Marshall <[EMAIL PROTECTED]> wrote:
> I have a question about the FIPS 140-2 status of the openssl command line
> tool.
>
> If I successfully compile openssl-fips-1.1.1 to obtain an openssl command
> line tool linked
> against
> it (fipscanister
I have a question about the FIPS 140-2 status of the openssl command line tool.
If I successfully compile openssl-fips-1.1.1 to obtain an openssl command line
tool linked against
it (fipscanister.o), and I use that openssl commandline tool to encrypt a file
with a FIPS
approved cipher (for examp
nker and created a symbolic link to my GNU linker. I was
> then able to successfully build FIPS on Solaris.
>
> I suspect a similar thing is happening for you in HPUX. You need to use
> GNU's ld.
>
> -David
>
> -Original Message-
> From: [EMAIL PROTECTED]
Wei:
I saw your post. I don't know whether it is correct or not. You are further
along that I am ;-)
I'll try the procedure in your post once I get my problem solved. I'm still
reading the OpenSSL
FIPS Object Module Guide, which covers what steps you have to go through for
the result to be
c
I am having trouble compiling openssl-fips-1.1.1 on HP-UX. If anyone has any
ideas what I am
doing wrong, I would be much oblidged ;-)
I'm getting the following error message at the end of the make attempt:
rm -f openssl
+ ../fips-1.0/fipsld -o openssl -DMONOLITH -I.. -I../include -DOPENSSL_TH
