summaryrefslogtreecommitdiff
path: root/README.FIPS
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2011-06-22 12:30:18 +0000
committerDr. Stephen Henson <steve@openssl.org>2011-06-22 12:30:18 +0000
commitce02589259c4eecf5479d6d5714d8caee7b5e326 (patch)
tree7477803fa00800e44d494f58c3f51c6aae409906 /README.FIPS
parent93dd7d3848d750f25137cd08ebde7bc06706c13d (diff)
downloadopenssl-new-ce02589259c4eecf5479d6d5714d8caee7b5e326.tar.gz
Now the FIPS capable OpenSSL is available simplify the various FIPS test
build options. All fispcanisterbuild builds only build fipscanister.o and include symbol renaming. Move all renamed symbols to fipssyms.h Update README.FIPS
Diffstat (limited to 'README.FIPS')
-rw-r--r--README.FIPS17
1 files changed, 2 insertions, 15 deletions
diff --git a/README.FIPS b/README.FIPS
index bae0a00f43..686308fcef 100644
--- a/README.FIPS
+++ b/README.FIPS
@@ -35,23 +35,10 @@ Run test vectors:
4. It should say "passed all tests" at the end. Report full details of any
failures.
-Run:
-
-make clean
-
-to remove any object modules from previous compile.
-
-Run symbol hiding test:
-
-./config fipscanisteronly -DOPENSSL_FIPSSYMS
-make
-
-This time only the fips utilities should be built.
-
Examine the external symbols in fips/fipscanister.o they should all begin
with FIPS or fips. One way to check with GNU nm is:
-nm -g --defined-only fips/fipscanister.o | grep -v -i fips
+ nm -g --defined-only fips/fipscanister.o | grep -v -i fips
If you get *any* output at all from this test (i.e. symbols not starting with
fips or FIPS) please report it.
@@ -76,7 +63,7 @@ Once you've created the tarball extract into a fresh directory and do:
make
You can then run the algorithm tests as above. This build automatically uses
-fipscanisteronly and -DOPENSSL_FIPSYMS and no-ec2m as appropriate.
+fipscanisterbuild and no-ec2m as appropriate.
FIPS capable OpenSSL test: WARNING PRELIMINARY INSTRUCTIONS, SUBJECT TO CHANGE.