View source for Fipsld and C++

== FIPS Object Module ==

The FIPS Object Module is built in accordance with the steps detailed in the [https://www.openssl.org/docs/fips/SecurityPolicy-2.0.pdf OpenSSL FIPS 2.0 Security Policy]. The OpenSSL Foundation also publishes a user guide at [https://www.openssl.org/docs/fips/UserGuide-2.0.pdf User Guide for the OpenSSL FIPS Object Module v2.0]. A grossly simplified version is presented below, but the steps are essentially the same as detailed in the guides and on other pages in the wiki.

<pre># Download and verify signature on openssl-fips-2.0.5.tar.gz
$ wget http://www.openssl.org/source/openssl-fips-2.0.5.tar.gz
$ wget http://www.openssl.org/source/openssl-fips-2.0.5.tar.gz.asc
$ pgp openssl-fips-2.0.5.tar.gz.asc 
pgp: Signature made Thu 20 Jun 2013 03:16:19 PM EDT using RSA key ID F295C759
...

# Build and install the FIPS Object Module
$ tar -xzf openssl-fips-2.0.5.tar.gz 
$ cd openssl-fips-2.0.5
$ ./config
$ make
$ sudo make install

# Copy required files missed by 'make install'
$ find . -iname incore
./util/incore
$ sudo cp util/incore /usr/local/ssl/fips-2.0/bin/
$ find . -iname fipsld
./fips/fipsld
$ sudo cp fips/fipsld /usr/local/ssl/fips-2.0/bin/</pre>

After the above executes, the FIPS Object Module components will be installed in <tt>/usr/local/ssl/fips-2.0</tt> directory. The components include <tt>fipscanister.o</tt> (and integrity signature), <tt>fips_premain.c</tt> (and integrity signature), <tt>incore</tt> and <tt>fipsld</tt>.