Jeremy Regan wrote:
Hello,

I was able to build the FIPS 1.2 software successfully using

./config --prefix=/apps/fips_build/fips-1.2-install fipscanisterbuild
no-asm
make
make install

Standard nag: you built it successfully in the sense that it compiled and linked without error, but you can't represent the result as FIPS 140-2 validated. The Security Policy is very specific about the fact that only two options to ./config are allowed, "no-asm" and "fipscanisterbuild".

What you can do is build it as mandated and then copy the resulting module where you want it to go. I know the difference seems silly, but the CMVP was very adamant on that point when we were working the first validation.

-Steve M.

--
Steve Marquess
Veridical Systems, Inc.
marqu...@veridicalsystems.com
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to