Hi, I'm trying to compile a fips version of openssl for the iphone. This has been difficult. I have tried so many different things I don't know where to start.
Has anyone done this? I setup a built environment where cc, and ar are scripts that call the appropriate compiler with the appropriate flags. I've used the incore script from the openssl site, but had to make modifications. It still doesn't work because DOT_rodata and DOT_rodata_OFF do not get set. If I do manage to get it compiled using ./config fipscanisterbuild no-asm make make install Will this be a fips certified binary for the iPhone? Does anyone know how secure mail managed to do this? http://www.secure-mail.me/ I've managed to get it compiled, but I'm having a hard time calculating the signatures. I suspect my incore script is wrong. Not sure how to compile an Xcode project using fipsLD. FIPS_mode_set always returns 0. Michal Palczewski
