On Fri, Jun 12, 2009, Carl Furner wrote:

> I need the validated version for fips.... For the contract I am working
> on.
> 
>  
> 
>  
> 
> 1)       Can I compile OpenSSL fips using VC 9 and still get a
> validated\certified version?
> 
>  

Yes, as long as you obey the rest of the security policy too.

> 
> 2)  Can I compile both win64 and win32 on a win32 environment?   We
> currently are building our x64 project under win32 and then running the
> binaries on a win64 windows OS.  Or do I have to compile each on the
> specific platform?
> 

No: the build environment needs to run a native binary to install the integrity
test signature.

>  
> 
> 3) Is it possible to change the names of the binaries and still have
> validation occur?
> 

If you mean the DLL names (for example) when you link against OpenSSL 0.9.8k
then that's fine because that isn't part of the validated build procedure.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to