[openssl-users] Building FIPS-capable OpenSSL on Linux PPC64

Steve Marquess marquess at openssl.com
Tue Sep 27 15:19:22 UTC 2016

On 09/27/2016 10:56 AM, Perrow, Graeme wrote:
> I am trying to build FIPS OpenSSL libraries for Linux PPC64 but it does
> not seem possible. This has been raised before (link below) but I didn’t
> see any resolution.
> http://openssl.6102.n7.nabble.com/BUG-FIPS-capable-OpenSSL-fails-to-build-on-Linux-PPC64-td66890.html
> I can build it if I run “./Configure linux-ppc64” but it is my
> understanding that you ***must*** build the FIPS libraries using
> “./config” or “./config no-asm”. Is there a workaround? Is there a fix
> coming? Given that the problem is within the FIPS module, is a fix
> possible without recertification?
> Thanks
> Graeme Perrow

Well, your first and biggest problem is that no Linux on 64-bit PPC
platforms ("OEs") have been validated. So whether you can build it there
or not it moot.

We can still add platforms to the 2.0 FIPS module, but of course that
takes time and money. Typically we would introduce new architecture
targets in config/Configure as necessary to accommodate the requirement
that command line options not be used (that's where most of the revision
bumps come from).

-Steve M.

Steve Marquess
OpenSSL Validation Services, Inc.
1829 Mount Ephraim Road
Adamstown, MD  21710
+1 877 673 6775 s/b
+1 301 874 2571 direct
marquess at openssl.com
gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc

More information about the openssl-users mailing list