Thanks, Steve.

The missing magic was 'fipscanisterbuild' - I had been using "./config
fips", which worked in the pre-1.2 versions of the fipscanister. I see
it in the Security Policy doc.  Sorry for being boneheaded and not RTFM
closely enough.


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson
Sent: Monday, November 24, 2008 2:47 PM
To: openssl-users@openssl.org
Subject: Re: Building fipscanister.o 1.2 with 0.9.8i

On Mon, Nov 24, 2008, Carlo Milono wrote:

> The error is in making fips - ("config fips", followed by "make") -
not
> even getting to "make" or "make install" for 0.9.8, so the
> "--with-fipslibdir" option doesn't apply yet. 
> 

You need to build the validated source tarball. That will compile and
install
that module. The validated module source is:

http://www.openssl.org/source/openssl-fips-1.2.tar.gz

You then have to follow the security policy including...

./config fipscanisterbuild
make
make install


Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to