Adding further I already tried below to build openssl, I already built fips libs with /tmp/_install path
/config fips --prefix=/tmp/_install --with-fipslibdir=/tmp/_install/lib -DOPENSSL_NO_EC -DOPENSSL_NO_ECDSA -DOPENSSL_NO_ECDH It also gives below build error ../../include/openssl/ec.h:78:2: error: #error EC is disabled. make[2]: *** [ec_lib.o] Error 1 - Saurabh On Wed, Jun 11, 2014 at 2:48 PM, Saurabh Pandya <er.saurabhpan...@gmail.com> wrote: > Hi, > > I am trying to build "openssl-0.9.8za" with "openssl-fips-1.2", but with > no luck. Came to know from release notes, that "openssl-0.9.8za" have know > compilation issues with FIPS. I got below statement from release notes > > "FIPS capable link failure with missing symbol > BN_consttime_swap. Fixed in 0.9.8zb-dev. Workaround is to compile with > no-ec: the EC algorithms are not > FIPS approved in OpenSSL 0.9.8 anyway. " > > I dont want to go with development version "0.9.8zb-dev", can anybody > helpme out with another option (compile 0.9.8za with no-ec), how can I > compile with no-ec. > > - > Thanks > Saurabh >
