From 7207eca1ee06ad4b5b5ab7b16e57f5f4f61606dd Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Thu, 26 May 2011 14:19:19 +0000 Subject: The first of many changes to make OpenSSL 1.0.1 FIPS capable. Add static build support to openssl utility. Add new "fips" option to Configure. Make use of installed fipsld and fips_standalone_sha1 Initialise FIPS error callbacks, locking and DRBG. Doesn't do anything much yet: no crypto is redirected to the FIPS module. Doesn't completely build either but the openssl utility can enter FIPS mode: which doesn't do anything much either. --- apps/Makefile | 2 ++ 1 file changed, 2 insertions(+) (limited to 'apps/Makefile') diff --git a/apps/Makefile b/apps/Makefile index bb384abdf3..658a09a2f2 100644 --- a/apps/Makefile +++ b/apps/Makefile @@ -153,6 +153,8 @@ $(EXE): progs.h $(E_OBJ) $(PROGRAM).o $(DLIBCRYPTO) $(DLIBSSL) $(RM) $(EXE) shlib_target=; if [ -n "$(SHARED_LIBS)" ]; then \ shlib_target="$(SHLIB_TARGET)"; \ + elif [ -n "$(FIPSCANLIB)" ]; then \ + FIPSLD_CC="$(CC)"; CC=$(FIPSDIR)bin/fipsld; export CC FIPSLD_CC; \ fi; \ LIBRARIES="$(LIBSSL) $(LIBKRB5) $(LIBCRYPTO)" ; \ $(MAKE) -f $(TOP)/Makefile.shared -e \ -- cgit v1.2.3