I have compiled the openssl-fips module, all is good so far. I am getting ready to attempt the openssl 0.9.8w portion again. With that in mind, what is your take on the below:
At this point a full OpenSSL library has been installed. However, the special distribution required to generate the validated FIPS Object Module does not correspond exactly to any official OpenSSL releases. Once the validated FIPS Object Module has been generated the other OpenSSL components can be replaced with components from a different OpenSSL distributions. Any 0.9.8 releases from j onwards (i.e. 0.9.8j or above) can be used for this purpose. OpenSSL 1.0 is not compatible. I am not sure how I should interpret this - do I expand the 0.9.8w tar file into the same directory as were I did the openssl-fips? Do I just expand 0.9.8w.tar into its own directory and proceed with the config fips, make and make install steps (this is what I have tried previously. It results in errors when attempting to run openssl to get its version)? -----Original Message----- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: Friday, May 25, 2012 3:53 PM To: openssl-users@openssl.org Subject: Re: Help with openssl FIPS on AIX On Fri, May 25, 2012, Brewster, Scott wrote: > We have openssl-fips installed on 1 system. I have been asked to > update it to openssl 0.9.8w. The person who did this previously is no > longer available, so I cant ask him what he did... > > > > I have downloaded, compiled and installed openssl-fips withtout issue: > > > > [root@pdclab-aix-01] /usr/local/ssl/fips-1.0/bin # ./openssl version > > OpenSSL FIPS Object Module v1.2 > > > > So far so good. > > > > When I attempt to compile openssl 0.9.8w, it appears to go without > issue and installs. > > > > ./config > Use: ./config fips Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
