On Mon, Oct 24, 2011, Bill Durant wrote: > On Oct 24, 2011, at 4:00 PM, Dr. Stephen Henson wrote: > > On Mon, Oct 24, 2011, Bill Durant wrote: > > > >> > >> > >> Hello Steve: > >> > >> I downloaded > >> ftp://openssl.org/snapshot/openssl-fips-2.0-test-20111023.tar.gz and > >> http://openssl.org/source/openssl-0.9.8r.tar.gz. > >> > >> I am getting the following compile errors. Any ideas on what I am doing > >> wrong? > >> > > > > You can't use OpenSSL 0.9.8 with the test 2.0 tarball. You have to use and > > OpenSSL 1.0.1 snapshot. > > Hello Steve, > > Thank you for the clarification. Now I am unable to get past 'nmake -f > ms\nt.mak' > > Attached is the build log. > > I downloaded the following: > > ftp://ftp.openssl.org/snapshot/openssl-1.0.1-stable-SNAP-20111024.tar.gz > ftp://ftp.openssl.org/snapshot/openssl-fips-2.0-test-20111024.tar.gz. > > I am getting the following compilation error. Any ideas on how to fix it? > Thanks. > > C:\> cd openssl-fips-2.0-test-20111024 > C:\> ms\do_fips no-asm > ... > ... > *************************** > ****FIPS BUILD SUCCESS***** > *************************** > > C:\> cd ..\openssl-1.0.1-stable-SNAP-20111024 > > C:\> perl Configure VC-WIN32 fips > --with-fipslibdir=..\openssl-fips-2.0-test-20111024\out32dll > --prefix=..\openssl-1.0.1-stable-SNAP-20111024-fips-static no-idea no-mdc2 > no-rc5 no-asm > ... > ... > > C:\> ms\do_nasm > ... > ... > C:\> nmake -f ms\nt.mak > ... > ... > cl /Fotmp32\o_fips.obj -Iinc32 -Itmp32 /MD /Ox /O2 /Ob2 -DOPENSSL_THREADS > -DDSO_WIN32 -W3 -WX -Gs0 -GF -Gy -nologo -DOPENSSL_SYSNAME_WIN32 > -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -D_CRT_SECURE_NO_DEPRECATE > -Isrocalslips-2.0/include -DOPENSSL_NO_IDEA -DOPENSSL_NO_RC5 -DOPENSSL_NO_MD2 > -DOPENSSL_NO_MDC2 -DOPENSSL_NO_KRB5 -DOPENSSL_FIPS -DOPENSSL_NO_JPAKE > -DOPENSSL_NO_DYNAMIC_ENGINE /Zl /Zi /Fdtmp32/lib -c .\crypto\o_fips.c > o_fips.c > crypto\o_fips.c(60) : fatal error C1083: Cannot open include file: > 'openssl/fips.h': No such file or directory > NMAKE : fatal error U1077: 'cl' : return code '0x2' > Stop. >
Set the FIPSDIR environment variable to a location where you want the module installed before you call ms\do_fips and then don't include the --with-fipslibdir option to Configure. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org