From ce02589259c4eecf5479d6d5714d8caee7b5e326 Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Wed, 22 Jun 2011 12:30:18 +0000 Subject: Now the FIPS capable OpenSSL is available simplify the various FIPS test build options. All fispcanisterbuild builds only build fipscanister.o and include symbol renaming. Move all renamed symbols to fipssyms.h Update README.FIPS --- README.FIPS | 17 ++--------------- 1 file changed, 2 insertions(+), 15 deletions(-) (limited to 'README.FIPS') diff --git a/README.FIPS b/README.FIPS index bae0a00f43..686308fcef 100644 --- a/README.FIPS +++ b/README.FIPS @@ -35,23 +35,10 @@ Run test vectors: 4. It should say "passed all tests" at the end. Report full details of any failures. -Run: - -make clean - -to remove any object modules from previous compile. - -Run symbol hiding test: - -./config fipscanisteronly -DOPENSSL_FIPSSYMS -make - -This time only the fips utilities should be built. - Examine the external symbols in fips/fipscanister.o they should all begin with FIPS or fips. One way to check with GNU nm is: -nm -g --defined-only fips/fipscanister.o | grep -v -i fips + nm -g --defined-only fips/fipscanister.o | grep -v -i fips If you get *any* output at all from this test (i.e. symbols not starting with fips or FIPS) please report it. @@ -76,7 +63,7 @@ Once you've created the tarball extract into a fresh directory and do: make You can then run the algorithm tests as above. This build automatically uses -fipscanisteronly and -DOPENSSL_FIPSYMS and no-ec2m as appropriate. +fipscanisterbuild and no-ec2m as appropriate. FIPS capable OpenSSL test: WARNING PRELIMINARY INSTRUCTIONS, SUBJECT TO CHANGE. -- cgit v1.2.3