RE: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-23 Thread David Schwartz
> This among other things requires the application to enable FIPS > mode which a > typical application will not do. One of several effects of > entering FIPS mode > is to disable the use of non-FIPS algorithms: this may cause > problems where > the application expectes to use such algorithms and c

Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-23 Thread Christopher Marshall
Wei: Here's what I think I've learned about this question. I think if you compiled openssl-fips-1.1.1 with "config fips; make; make install" the result would be an openssl library that was fips certified. Getting libcurl to make proper use of it would then be a question of whether libcurl make

Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-23 Thread Dr. Stephen Henson
On Fri, Feb 23, 2007, Wei Weng wrote: > Chris: Thanks for the reply. > > Here is the thing I want: I need to build a openssl library that is fips > capable so that I can link libcurl against the library, since libcurl > uses openssl library to do the decode/encode stuff. > > I am guessing that

Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-23 Thread Wei Weng
Chris: Thanks for the reply. Here is the thing I want: I need to build a openssl library that is fips capable so that I can link libcurl against the library, since libcurl uses openssl library to do the decode/encode stuff. I am guessing that I will need to build my own openssl library that

Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-22 Thread Christopher Marshall
Wei: My current guess is that if all you are trying to do is get an openssl utility that is FIPS certified, then doing ./config fips make make install from inside the top level directory of openssl-fips-1.1.1 is all that is required. If you want an openssl utility of a more recent 0.

Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread Dr. Stephen Henson
On Thu, Feb 15, 2007, David Hartman wrote: > Hi Chris, Wei, > > The normal OpenSSL config and build scripts seem to be different from > the FIPS one. My original attempts at building FIPS didn't run into a > problem until the steps to link fipscannister.o itself. This wouldn't be > an issue with

RE: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread David Hartman
ted with the OS doesn't understand the options supplied for GNU's linker. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christopher Marshall Sent: Thursday, February 15, 2007 2:10 PM To: openssl-users@openssl.org Subject: RE: compiling openssl-fi

RE: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread Christopher Marshall
> [mailto:[EMAIL PROTECTED] On Behalf Of Christopher > Marshall > Sent: Thursday, February 15, 2007 12:51 PM > To: openssl-users@openssl.org > Subject: compiling openssl-fips-1.1.1 on HP-UX 11.11 > > I am having trouble compiling openssl-fips-1.1.1 on HP-UX. If anyone > h

Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread Christopher Marshall
Wei: I saw your post. I don't know whether it is correct or not. You are further along that I am ;-) I'll try the procedure in your post once I get my problem solved. I'm still reading the OpenSSL FIPS Object Module Guide, which covers what steps you have to go through for the result to be c

Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread Wei Weng
Hi. Sorry I can not answer your question, but it seems that you are the only one that is working on getting openssl-fips-1.1.1 to work these days, so I had to bug you for some trivial questions. :) Do you think the process I had gone into making openssl-fips-1.1.1 work is correct? (I do realiz

RE: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread David Hartman
lf Of Christopher Marshall Sent: Thursday, February 15, 2007 12:51 PM To: openssl-users@openssl.org Subject: compiling openssl-fips-1.1.1 on HP-UX 11.11 I am having trouble compiling openssl-fips-1.1.1 on HP-UX. If anyone has any ideas what I am doing wrong, I would be much oblidged ;-) I'm g

compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread Christopher Marshall
I am having trouble compiling openssl-fips-1.1.1 on HP-UX. If anyone has any ideas what I am doing wrong, I would be much oblidged ;-) I'm getting the following error message at the end of the make attempt: rm -f openssl + ../fips-1.0/fipsld -o openssl -DMONOLITH -I.. -I../include -DOPENSSL_TH