On Wed, Oct 05, 2011, Bill Durant wrote: > On Oct 5, 2011, at 8:08 AM, Dr. Stephen Henson wrote: > > On Tue, Oct 04, 2011, William A. Rowe Jr. wrote: > > > >> On 10/4/2011 10:45 PM, Bill Durant wrote: > >>> > >>> Does anyone know how to produce a FIPS-capable OpenSSL that works on > >>> Windows NT? > >> > >> It's likely not possible... > >> > >>> But when I run it under Windows NT, I get the following run-time error: > >>> > >>> "The procedure entry point Module32NextW could not be located in the > >>> dynamic link library KERNEL32.dll" > >> > >> If you use the equivalent of nm against the fipscanister.lib, I'd expect > >> you'll find the binding there. > >> > >> I see no reason the team would accommodate this in OpenSSL/FIPS 2.0, > >> though. > >> Support for Windows NT 4.xx ended on December 31, 2004. Support for > >> Windows > >> 2000 ended on July 13, 2010. So updating "security" or cryptographic > >> software > >> validation for such systems is something of an oxymoron. > > > > I'd suggest the OP try to build the 2.0 test module and run fips_test_suite > > on > > NT as it may work. A lot of the platform specific code has been removed from > > the 2.0 module design. > > Thank you everyone for the comments so far. > > What is the 2.0 test module? Does it mean to build openssl-fips-1.2.tar.gz? >
For the upcoming 2.0 validation test snapshots are available. You can see them at: ftp://ftp.openssl.org/snapshot/ Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
