[openssl-users] Regarding FIPS capable openssl (I want to combine libcrypto.a and libssl.a)

Sahil Gandhi sahilgandhi87 at gmail.com
Fri Jul 1 11:40:26 UTC 2016


Hi All,

I am now able to solve this problem, myself.
We need to do changes in fipsld script.
Change 'crypto' or 'libcrypto' to whatever name (u want to specify for the
lib) in fipsld utility script and that's it.

Thanks,
-Sahil Gandhi

On Thu, Jun 30, 2016 at 9:28 AM, Sahil Gandhi <sahilgandhi87 at gmail.com>
wrote:

> Hi Steve,
>
> Thanks for the reply.
>
> Regards,
> Sahil
>
> On Wed, Jun 29, 2016 at 6:25 PM, Steve Marquess <marquess at openssl.com>
> wrote:
>
>> On 06/29/2016 07:09 AM, Sahil Gandhi wrote:
>> > Hi Ken,
>> >
>> > Sorry for the late reply. I really appreciate your suggestion but I some
>> > how need to have static library not the dynamic one.
>>
>> You can statically link an application with the FIPS module, using the
>> special "fipsld" link process, but you cannot put the FIPS module in a
>> conventional static library (as managed with "ar").
>>
>> Unfortunately the requirements of FIPS 140-2 conflict in several ways
>> with standard software engineering practice; it is the tail that wags
>> the dog.
>>
>> -Steve M.
>>
>> --
>> Steve Marquess
>> OpenSSL Validation Services, Inc.
>> 1829 Mount Ephraim Road
>> Adamstown, MD  21710
>> USA
>> +1 877 673 6775 s/b
>> +1 301 874 2571 direct
>> marquess at openssl.com
>> gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc
>> --
>> openssl-users mailing list
>> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>>
>
>
>
> --
> Sahil Gandhi
> Project Engineer
> R&D CDAC, Pune
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160701/6a3f7312/attachment.html>


More information about the openssl-users mailing list