支持FIPS的OpenSSL和openssl/fips.h:无此类文件或目录 [英] FIPS Capable OpenSSL and openssl/fips.h: No such file or directory

问题描述

我正在分别使用openssl-fips-ecp-2.0.9和openssl-1.0.1j为FIPS对象模块和兼容FIPS的OpenSSL进行构建.

I am doing build for FIPS Object Module and FIPS compatible OpenSSL using openssl-fips-ecp-2.0.9 and openssl-1.0.1j respectively.

其中一个成功编译的FIPS.但是根据用户指南在./config中添加fips选项会产生错误:

Out of which FIPS one compiled successfully. But as per User Guide adding fips option with ./config is giving error:

march=mips32 -fomit-frame-pointer -Wall -Ifips/openssl-fips-ecp-2.0.9/include -DSHA1_ASM -DSHA256_ASM -DAES_ASM   -c -o o_fips.o o_fips.c
o_fips.c:60:26: fatal error: openssl/fips.h: No such file or directory
compilation terminated.
make[6]: *** [o_fips.o] Error 1

crypto的Makefile使用的是o_fips.c& o_fips.c的代码如下:

crypto’s Makefile is using o_fips.c & o_fips.c is having a code like this:

#include "cryptlib.h"
#ifdef OPENSSL_FIPS
#include <openssl/fips.h>
#include <openssl/fips_rand.h>
#include <openssl/rand.h>
#endif

由于1.0.1版本之后的库中没有要包含的fips文件夹. 有人可以在这里帮我吗?

Since there is no fips folder to include in the library after 1.0.1 versions. Can anyone please help me out here?

推荐答案

通过提供适当的--openssldir和--with-fipsdir选项可以解决问题.

Problem solved by giving proper --openssldir and --with-fipsdir options.

这篇关于支持FIPS的OpenSSL和openssl/fips.h:无此类文件或目录的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！