Re: how to compile openssl with -bindist option

2014-08-06 Thread Gayathri Manoj
Hi Matt, One more doubt. Please let me know if I compiled my openssl 0.9.8za without -no-ec option and I am not using this alogorithm in any of my application then shall I can say my application is fips complaint? Thanks, Gayathri On Wed, Aug 6, 2014 at 7:22 PM, Gayathri Manoj wrote: > Hi, >

Re: how to compile openssl with -bindist option

2014-08-06 Thread Gayathri Manoj
Hi, Thanks for your update. We tried to compile without -no-ec . but its got failed. Thanks, Gayathri On Wed, Aug 6, 2014 at 7:16 PM, Matt Caswell wrote: > On 6 August 2014 14:35, Gayathri Manoj wrote: > > Hi Matt, > > > > Is there any solution to compile openssl-0.9.8za without -no-ec opti

Re: how to compile openssl with -bindist option

2014-08-06 Thread Matt Caswell
On 6 August 2014 14:35, Gayathri Manoj wrote: > Hi Matt, > > Is there any solution to compile openssl-0.9.8za without -no-ec option. Or > do we have any patch available to fix the fips breakage issue. > Known issues in OpenSSL 0.9.8za: > > FIPS capable link failure with missing symbol BN_consttime

Re: how to compile openssl with -bindist option

2014-08-06 Thread Gayathri Manoj
Hi Matt, Is there any solution to compile openssl-0.9.8za without -no-ec option. Or do we have any patch available to fix the fips breakage issue. *Known issues in OpenSSL 0.9.8za:* - FIPS capable link failure with missing symbol BN_consttime_swap. Fixed in 0.9.8zb-dev. Workaround is to com

Re: how to compile openssl with -bindist option

2014-08-06 Thread Matt Caswell
On 6 August 2014 14:12, Gayathri Manoj wrote: > Hi Matt, > > Thanks Matt. > > My actual issue is that I am not able to generate ecdsa keys after upgrading > openssl version from 0.9.8y to 0.9.8za. For making our openssl fips > compliant we complied the same with -no-ec option that is recommended b

Re: how to compile openssl with -bindist option

2014-08-06 Thread Gayathri Manoj
t; > Please let me know how to compile openssl with -bindist option. > > > > I suspect you are asking this on the wrong forum as I think this is a > gentoo thing not an openssl thing. > > With the caveat that I know nothing about gentoo, a few minutes > googling tu

Re: how to compile openssl with -bindist option

2014-08-06 Thread Matt Caswell
On 6 August 2014 11:27, Gayathri Manoj wrote: > Hi All, > > Please let me know how to compile openssl with -bindist option. > I suspect you are asking this on the wrong forum as I think this is a gentoo thing not an openssl thing. With the caveat that I know nothing about gentoo, a

how to compile openssl with -bindist option

2014-08-06 Thread Gayathri Manoj
Hi All, Please let me know how to compile openssl with -bindist option. Thanks, Gayathri