Thomas,

I view GetSystemTimeAsFileTime as a Win32 API function that has been left
out of Windows CE.  It's still part of the Windows platform though, and
wcecompat is about providing the parts of the Windows platform left out of
Windows CE.  I'm not sure how the accreditation could specifically disallow
changes outside of OpenSSL since it would also impact whether or not you
could use gcc vs native tools and possibly even compiler/library updates.

If you'd be so kind as to send me the implementation that you did for that
function I'll incorporate it into the next wcecompat release when I get the
time.  I originally had bigger plans for wcecompat but so far it's only
purpose has been to provide the functionality that OpenSSL requires -- it
sounds like changes in OpenSSL may require more wcecompa functionality.

Regards,

Steven

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Thomas Laramee
Sent: Thursday, 10 February 2005 4:30 AM
To: openssl-users@openssl.org
Subject: Openssl, FIPS, and WinCE

Greetings:

i recently downloaded openssl.0.9.7e, unpacked it, and began to follow the
instructions to build this for WinCE.

i have a bunch of specific questions, but i'm more interested in a
high-level question about FIPS
certification:

how many modifications can i make to both the openssl source code and
wcecompat before my openssl build is no longer FIPS certified? 

E.g.:  when trying to build crypto/rand/rand_win.c, 
   there is an undefined GetSystemTimeAsFileTime 
   method...  to get the build to complete, i have 
   to add my own version of this method. 

   does this mean that my openssl DLL will not be 
   FIPS certified?  

my thinking was that, if i build the source "as is", then i wouldn't have to
have my openssl DLL re-certified ... but if i modified it, i would.  so i'd
prefer to build the code untouched, only it doesn't build for WinCE unless
it's modified.

thoughts/comments would be very much appreciated.

thanks
--toml
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to