Rabail:  openssl-fips-1.1.1 is a 0.9.7 based version of openssl.
Therefore, you will be downgrading your 0.9.8b version if you choose to
do this.

 

Also, you should be using openssl-fips-1.1.2 now not openssl-fips-1.1.1
as it has fixed a minor problem with the earlier version.  You may want
to consider working with the snapshot version openssl-fips-test-1.2.0
which is the 0.9.8 based version that is currently undergoing FIPS
examination.

 

With regard to the process, you have to first build the fips canisters
as described in the docs.  You then end up with the fips pieces in
/usr/local.

 

Then you build a fips capable version of openssl to reside in the target
directories of your choice.  If you are using openssl-fips-1.1.1 then
you would do this with openssl-0.9.7m

 

Bill

 

________________________________

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of rabail javed
Sent: June 26, 2008 4:23 PM
To: openssl-users@openssl.org
Cc: James Erskine; Rifaat Shekh-Yusef
Subject: upgrading openssl 0.9.8b to openssl-fips-1.1.1

 

Hi , 

I am upgrading the openssl 0.9.8b to openssl-fips-1.1.1. For  doing this
i need to delete the previous version and install the newer version
according the instructions specified in
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp733.pdf

By default all the files(bin, include and lib) will be installed to
/usr/local/. I dont want to install in these directories, I want to
install in the existing directories used by the 0.9.8b version which are
different . I can change the installation directory using ./config
command and giving the prefix and openssl directory of my own choice.
But according to the above document "Appendix B" i cannot give any other
confiugration options. Could you please  tell me the way to install
openssl-fips-1.1.1 version in the old directories used by the
openssl0.9.8b.


-- 
Regards,
Rabail Javed

Telecommunications Software Designer
NORTEL NETWORKS CORPORATION
Canada 
cell: 1-613-242-1316 

Reply via email to