hi,
I develop my application and I need to use OpenSSL 1.0.2 with the OpenSSL FIPS Object Module 2.0. I know that OpenSSL 3.0 was released, but unfortunately I must use OpenSSL 1.0.2.
I have read OpenSSL FIPS Object Module 2.0 documentation and I have one misunderstanding.
"note that as a condition of the FIPS 140-2 validation no other user specified configuration options may be specified."
I develop my application and I need to use OpenSSL 1.0.2 with the OpenSSL FIPS Object Module 2.0. I know that OpenSSL 3.0 was released, but unfortunately I must use OpenSSL 1.0.2.
I have read OpenSSL FIPS Object Module 2.0 documentation and I have one misunderstanding.
"note that as a condition of the FIPS 140-2 validation no other user specified configuration options may be specified."
Does it mean that I can't make any changes in the build configuration files? For example, can I change some compilation flags(CFLAGS) or change the list of linked libraries in makefile or others? If I do it will I lose some FIPS-140-2 validation or as a result, will I get an incorrect FIPS 140-2 library or will I lose some FIPS 140-2 compliance ? Can you explain it to me please ?
i already know that i can't change any configuration settings in make files.
it means that command
ms\do_fips
i already know that i can't change any configuration settings in make files.
it means that command
ms\do_fips
build fips module with CFLAG /MD
and I can't change it, corect? i can't build a fips module with option /MT, correct?
and I can't change it, corect? i can't build a fips module with option /MT, correct?
So it means I can use openssl only in /MD mode, correct? so my target windows console app\dll can be only in /MD mode, correct?
can you help me to understand plz?
thanks.
can you help me to understand plz?
thanks.
