FIPS Security Policy question

2006-06-22 Thread Tinnerello, Richard
Our application consists of multiple Unix processes each of which creates its own OpenSSL instance. Does it violate the Security Policy if some of those processes set OpenSSL into FIPS mode while others do not? In other words, does the existence of non-FIPS mode toolkit instances invalidate

FIPS 1.1 module availability

2006-06-21 Thread Tinnerello, Richard
Can anyone say when the openssl-fips-1.1.tar.gz distribution announced on Saturday will be available for download? Thanks! Richard

building FIPS 1.0 on S390 RedHat AS3.0

2006-06-06 Thread Tinnerello, Richard
Has anyone been able to build FIPS 1.0 on an IBM mainframe running RedHat AS 3.0?   Following “./config fips” the “make” gets the following error:   + ../fips-1.0/fipsld -o openssl -DMONOLITH -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_KRB5 -

building 0.9.7j with fips parameter

2006-03-30 Thread Tinnerello, Richard
Title: building 0.9.7j with fips parameter Hello, Has anyone been able to build 0.9.7j (OpenSSL-fips-1.0) with the 'fips' parameter? We get a hash check error although we have modified nothing in the distribution: make[3]: Leaving directory `/sci/users/OpenSSL/openssl-0.9.7j/fips-1.0/hma

source code error in fips/aes/asm/fips-ax86-elf.s in 0.9.7i fips build ?

2006-01-20 Thread Tinnerello, Richard
Title: source code error in fips/aes/asm/fips-ax86-elf.s in 0.9.7i fips build ? Hello, There seems to be a source code syntax error in fips/aes/asm/fips-ax86-elf.s in 0.9.7i that causes the build to fail on our Solaris 10 Opteron system: gcc -c   -o asm/fips-ax86-elf.o asm/fips-ax86-elf.s

RE: compile error in randfile.c on Solaris 10 Opteron

2006-01-20 Thread Tinnerello, Richard
-frame-pointer -mcpu=i486 -Wall -DL_ENDIAN -DOPENSSL_NO_INLINE_ASM -DSHA1_ASM -DMD5_ASM -DRMD160_ASM -E -o randfile.e randfile.c and see what randfile.e looks like, searching for the string 'ctid_t'. -Kyle H On 1/19/06, Tinnerello, Richard <[EMAIL PROTECTED]> wrote: > >

compile error in randfile.c on Solaris 10 Opteron

2006-01-19 Thread Tinnerello, Richard
Title: compile error in randfile.c on Solaris 10 Opteron Hello, I'm having trouble building 0.9.7i on a Solaris 10 on x86 (Opteron) machine. I configured manually with: ./Configure solaris-x86-gcc --prefix=/sci/openssl-0.9.7i no-idea no-rc5 no-mdc2 fiips make depend is OK, but make gets t

FIPS 140-2 validation

2006-01-04 Thread Tinnerello, Richard
Hello, My understanding from the OSSI website is that OSSI is in the process of pursuing FIPS 140-2 certification for OpenSSL. I’d like to know what OpenSSL version has been submitted. The OSSI site mentions 0.9.7b, but this seems to not be correct as this version doesn’t include the KATs,

OpenSSL 0.9.8a on AIX 5.1

2005-12-07 Thread Tinnerello, Richard
Title: OpenSSL 0.9.8a on AIX 5.1 Hi, I'm having trouble installing 0.9.8a on an AIX 5.1 machine. I ./config with defaults except for a prefix= spec. and the make, make test, and make install all seem to complete normally. But, when I try to run the openssl app, I get: exec(): 0509-036 Cannot