Build the FIPS Object Module issue on Ubuntu 18.04

Paul Dale paul.dale at oracle.com
Thu May 16 00:11:15 UTC 2019


Just noting that any module built in this manner is *not* FIPS compliant.

The distribution must be unmodified and build exactly as per the documentation.  Any change to the files or the build process renders the result invalid from a FIPS perspective.


Pauli
-- 
Oracle
Dr Paul Dale | Cryptographer | Network Security & Encryption 
Phone +61 7 3031 7217
Oracle Australia

-----Original Message-----
From: sreekanth1m [mailto:sreekanth1m at gmail.com] 
Sent: Thursday, 16 May 2019 7:56 AM
To: openssl-users at openssl.org
Subject: Re: Build the FIPS Object Module issue on Ubuntu 18.04

I was able to generate FIPS Object Module - fipscanister.o
fipscanister.o.sha1  fips_premain.c  fips_premain.c.sha1 successfully but now struck in generating Build the FIPS capable library.

followed below steps:

$ . ./setenv-android.sh
$ cd openssl-1.0.1e/
Next, fix the makefile and run configure.

$ perl -pi -e 's/install: all install_docs install_sw/install: install_docs install_sw/g' Makefile.org $ ./config fips shared no-ssl2 no-ssl3 no-comp no-hw no-engine --openssldir=/usr/local/ssl/android-14/ \
  --with-fipsdir=/usr/local/ssl/android-14/
--with-fipslibdir=/usr/local/ssl/android-14/lib/
Then run make depend and make all:

$ make depend
$ make all

make all is resulting in failure with below error message:
/usr/local/ssl/android-22/bin/fipsld: ./fips_premain_dso: not found
Makefile.shared: 169: recipe for target 'link_a.gnu' failed.

please let me know what I am missing.

Thanks



--
Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html


More information about the openssl-users mailing list