Thanks, Steve. The missing magic was 'fipscanisterbuild' - I had been using "./config fips", which worked in the pre-1.2 versions of the fipscanister. I see it in the Security Policy doc. Sorry for being boneheaded and not RTFM closely enough.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: Monday, November 24, 2008 2:47 PM To: openssl-users@openssl.org Subject: Re: Building fipscanister.o 1.2 with 0.9.8i On Mon, Nov 24, 2008, Carlo Milono wrote: > The error is in making fips - ("config fips", followed by "make") - not > even getting to "make" or "make install" for 0.9.8, so the > "--with-fipslibdir" option doesn't apply yet. > You need to build the validated source tarball. That will compile and install that module. The validated module source is: http://www.openssl.org/source/openssl-fips-1.2.tar.gz You then have to follow the security policy including... ./config fipscanisterbuild make make install Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]