Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-23 Thread Dr. Stephen Henson
On Fri, Feb 23, 2007, Wei Weng wrote: Chris: Thanks for the reply. Here is the thing I want: I need to build a openssl library that is fips capable so that I can link libcurl against the library, since libcurl uses openssl library to do the decode/encode stuff. I am guessing that I

Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-23 Thread Christopher Marshall
Wei: Here's what I think I've learned about this question. I think if you compiled openssl-fips-1.1.1 with config fips; make; make install the result would be an openssl library that was fips certified. Getting libcurl to make proper use of it would then be a question of whether libcurl makes

RE: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-23 Thread David Schwartz
This among other things requires the application to enable FIPS mode which a typical application will not do. One of several effects of entering FIPS mode is to disable the use of non-FIPS algorithms: this may cause problems where the application expectes to use such algorithms and cannot

Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-22 Thread Christopher Marshall
Wei: My current guess is that if all you are trying to do is get an openssl utility that is FIPS certified, then doing ./config fips make make install from inside the top level directory of openssl-fips-1.1.1 is all that is required. If you want an openssl utility of a more recent

compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread Christopher Marshall
I am having trouble compiling openssl-fips-1.1.1 on HP-UX. If anyone has any ideas what I am doing wrong, I would be much oblidged ;-) I'm getting the following error message at the end of the make attempt: rm -f openssl + ../fips-1.0/fipsld -o openssl -DMONOLITH -I.. -I../include

RE: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread David Hartman
Of Christopher Marshall Sent: Thursday, February 15, 2007 12:51 PM To: openssl-users@openssl.org Subject: compiling openssl-fips-1.1.1 on HP-UX 11.11 I am having trouble compiling openssl-fips-1.1.1 on HP-UX. If anyone has any ideas what I am doing wrong, I would be much oblidged ;-) I'm getting

Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread Wei Weng
Hi. Sorry I can not answer your question, but it seems that you are the only one that is working on getting openssl-fips-1.1.1 to work these days, so I had to bug you for some trivial questions. :) Do you think the process I had gone into making openssl-fips-1.1.1 work is correct? (I do

Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread Christopher Marshall
Wei: I saw your post. I don't know whether it is correct or not. You are further along that I am ;-) I'll try the procedure in your post once I get my problem solved. I'm still reading the OpenSSL FIPS Object Module Guide, which covers what steps you have to go through for the result to be

RE: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread Christopher Marshall
, February 15, 2007 12:51 PM To: openssl-users@openssl.org Subject: compiling openssl-fips-1.1.1 on HP-UX 11.11 I am having trouble compiling openssl-fips-1.1.1 on HP-UX. If anyone has any ideas what I am doing wrong, I would be much oblidged ;-) I'm getting the following error message

RE: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread David Hartman
. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christopher Marshall Sent: Thursday, February 15, 2007 2:10 PM To: openssl-users@openssl.org Subject: RE: compiling openssl-fips-1.1.1 on HP-UX 11.11 David: Thanks for the info. Interestingly enough, I

Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread Dr. Stephen Henson
On Thu, Feb 15, 2007, David Hartman wrote: Hi Chris, Wei, The normal OpenSSL config and build scripts seem to be different from the FIPS one. My original attempts at building FIPS didn't run into a problem until the steps to link fipscannister.o itself. This wouldn't be an issue with the