Re: openssl fipsinstall

2020-07-27 Thread Dr Paul Dale
I'm replacing OpenSSL 1.0.2 with OpenSSL 3.0 in an embedded environment with >> very limited flash space. We need and use libcrypto and libssl but we have >> no need for the openssl binary. To date it was never necessary to ship this >> utility in our product. Now with OpenSSL

Re: openssl fipsinstall

2020-07-27 Thread Thomas Dwyer III
need for the openssl binary. To date it was never necessary to ship > this utility in our product. Now with OpenSSL 3.0 it appears the only way > to get FIPS support is to run "openssl fipsinstall ..." to create a FIPS > config file to be included by the main config file. How

Re: openssl fipsinstall

2020-07-27 Thread Dr Paul Dale
FIPS support is to run "openssl fipsinstall ..." to create a FIPS config file > to be included by the main config file. However, at nearly 1MB in size this > binary is prohibitively large. > > I am able to reproduce the output of "openssl fipsinstall ..." with a &g

openssl fipsinstall

2020-07-27 Thread Thomas Dwyer III
s the only way to get FIPS support is to run "openssl fipsinstall ..." to create a FIPS config file to be included by the main config file. However, at nearly 1MB in size this binary is prohibitively large. I am able to reproduce the output of "openssl fipsinstall ..." wit