[stunnel-users] OpenSSL FIPS header not found - version 5.02

Thu Jun 26 01:16:11 CEST 2014

You need to follow these steps:
1.1.1       Build openssl-fips package
>From https://www.openssl.org/source/, download latest openssl-fips package and unzip under

tar -zxvf openssl-fips-2.0.5.tar.gz<https://www.openssl.org/source/openssl-fips-2.0.5.tar.gz>
cd /home/user/openssl-fips-2.0.5
/Configure --prefix=/usr/local  linux-generic32
make
make install

1.1.2       Build FIPS capable openssl package
>From https://www.openssl.org/source/, download latest openssl  package and unzip under

tar -zxvf openssl-1.0.1h.tar.gz<https://www.openssl.org/source/openssl-1.0.1h.tar.gz>
Cd /home/user/openssl-1.0.1h
./Configure --prefix=/usr/local --with-fipsdir=/usr/local  fips  linux-generic32
make CC=fipsld FIPSLD_CC=gcc -j 8
make install
the binary openssl can be found at /usr/local/bin/openssl
[root at ssl86 hyu]# openssl version
OpenSSL 1.0.1h-fips 5 Jun 2014

#######here is tricky, go back to FIPS directory make install again.
cd /home/user/openssl-fips-2.0.5
make install
1.1.3       Build stunnel package
>From https://www.stunnel.org/downloads.html, Download latest stunnel version 5.02 package and unzip under
tar -zxvf stunnel-5.02.tar.gz<https://www.stunnel.org/downloads/stunnel-5.02.tar.gz>
cd /home/user/stunnel-5.02
./configure --enable-fips --with-ssl=/usr/local/ --prefix=/usr/local
make CC=fipsld FIPSLD_CC=gcc -j 8
make install
the stunnel binary can be found at /usr/local/bin/stunnel

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20140625/5ed7fcde/attachment.html>