On 26 Jun 2014, at 9:16 am, Hui Yu <[email protected]> wrote:
You need to follow these steps:
1.1.1 Build openssl-fips package
From https://www.openssl.org/source/, download latest openssl-fips package and unzip under
tar –zxvf openssl-fips-2.0.5.tar.gz
cd /home/user/openssl-fips-2.0.5
/Configure --prefix=/usr/local linux-generic32
make
make install

1.1.2 Build FIPS capable openssl package
From https://www.openssl.org/source/, download latest openssl package and unzip under
tar –zxvf openssl-1.0.1h.tar.gz 
Cd /home/user/openssl-1.0.1h
./Configure --prefix=/usr/local --with-fipsdir=/usr/local fips linux-generic32

This ends with:

Since you've disabled or enabled at least one algorithm, you need to do

the following before building:

make depend

Configured for linux-generic32.

make CC=fipsld FIPSLD_CC=gcc -j 8

This gives me:

../include/openssl/bio.h:332: error: parameter name omitted

bntest.c:2013: error: expected ‘{’ at end of input

req.c: In function ‘do_sign_init’:

req.c:1799: error: ‘bio_err’ undeclared (first use in this function)

make[1]: *** [bntest.o] Error 1

make[1]: *** [req.o] Error 1

make: *** [build_tests] Error 1

make: *** [build_apps] Error 1

make: *** [build_ssl] Error 1

Any suggestions?

Thanks,

James.