[openssl-users] Regarding FIPS capable openssl (I want to combine libcrypto.a and libssl.a)

Sahil Gandhi sahilgandhi87 at gmail.com
Thu Jun 30 03:58:28 UTC 2016


Hi Steve,

Thanks for the reply.

Regards,
Sahil

On Wed, Jun 29, 2016 at 6:25 PM, Steve Marquess <marquess at openssl.com>
wrote:

> On 06/29/2016 07:09 AM, Sahil Gandhi wrote:
> > Hi Ken,
> >
> > Sorry for the late reply. I really appreciate your suggestion but I some
> > how need to have static library not the dynamic one.
>
> You can statically link an application with the FIPS module, using the
> special "fipsld" link process, but you cannot put the FIPS module in a
> conventional static library (as managed with "ar").
>
> Unfortunately the requirements of FIPS 140-2 conflict in several ways
> with standard software engineering practice; it is the tail that wags
> the dog.
>
> -Steve M.
>
> --
> Steve Marquess
> OpenSSL Validation Services, Inc.
> 1829 Mount Ephraim Road
> Adamstown, MD  21710
> USA
> +1 877 673 6775 s/b
> +1 301 874 2571 direct
> marquess at openssl.com
> gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc
> --
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>



-- 
Sahil Gandhi
Project Engineer
R&D CDAC, Pune
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160630/25d45613/attachment-0001.html>


More information about the openssl-users mailing list