Rabail: openssl-fips-1.1.1 is a 0.9.7 based version of openssl. Therefore, you will be downgrading your 0.9.8b version if you choose to do this.
Also, you should be using openssl-fips-1.1.2 now not openssl-fips-1.1.1 as it has fixed a minor problem with the earlier version. You may want to consider working with the snapshot version openssl-fips-test-1.2.0 which is the 0.9.8 based version that is currently undergoing FIPS examination. With regard to the process, you have to first build the fips canisters as described in the docs. You then end up with the fips pieces in /usr/local. Then you build a fips capable version of openssl to reside in the target directories of your choice. If you are using openssl-fips-1.1.1 then you would do this with openssl-0.9.7m Bill ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of rabail javed Sent: June 26, 2008 4:23 PM To: openssl-users@openssl.org Cc: James Erskine; Rifaat Shekh-Yusef Subject: upgrading openssl 0.9.8b to openssl-fips-1.1.1 Hi , I am upgrading the openssl 0.9.8b to openssl-fips-1.1.1. For doing this i need to delete the previous version and install the newer version according the instructions specified in http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp733.pdf By default all the files(bin, include and lib) will be installed to /usr/local/. I dont want to install in these directories, I want to install in the existing directories used by the 0.9.8b version which are different . I can change the installation directory using ./config command and giving the prefix and openssl directory of my own choice. But according to the above document "Appendix B" i cannot give any other confiugration options. Could you please tell me the way to install openssl-fips-1.1.1 version in the old directories used by the openssl0.9.8b. -- Regards, Rabail Javed Telecommunications Software Designer NORTEL NETWORKS CORPORATION Canada cell: 1-613-242-1316
