I've previously been trying to cross compile openssl-fips version 1.2 for 
my MIPS target, following the guidance in the user's guide, security 
policy, and this mailing list.  I don't see a crossbuild patch for version 
1.2.2, nor any instructions in the 1.2.2 documentation.  I'm wondering if 
there is a patch coming in the future, or if cross compilation is now 
"built in" without the need for a patch, or if cross-compilation is no 
longer a supported option in version 1.2.2. 

I initially was hoping that the crossbuild modifications simply got 
included in the new version's source by default, removing the need for the 
additional patch.  After examining the fipsld script, I'm fairly certain 
that is a bad assumption, as version 1.2.2 of the fipsld doesn't include 
the FIPS_SIG modifications that the 1.2 crossbuild patch contained.

I could just try applying the 1.2 patch to the 1.2.2 tarball, but the fact 
that the crossbuild patch (and instructions for its use) were completely 
removed from the security policy gave me pause.  Coupled with other little 
caveats I've read about cross compilation on the 'private label' 
validation website, the new validation rules for 2011, etc. it seemed like 
I could waste a bunch of my time sticking with the cross compilation 
strategy.  I thought I'd send a query as to the future plans on cross 
compilation before I go down that road any further.

Thanks in advance for any cross compilation information you can provide.

-Brian

Reply via email to