For portability use BUF_strndup instead of strndup.

[openssl.git] / README.FIPS

diff --git a/README.FIPS b/README.FIPS
index 64d672a470bddc076b5be6fa2bb3fa205ed8a2f4..c41bab99307bfc71bc69ea876e6640b68b099667 100644 (file)
--- a/README.FIPS
+++ b/README.FIPS
@@ -9,11 +9,15 @@ make clean
 
 To build the module do:
 
 
 To build the module do:
 

-./config fipscanisterbuild
+./config fipscanisteronly

 make
 
 Build should complete without errors.
 
 make
 
 Build should complete without errors.
 

+Build test utilities:
+
+make build_tests
+

 Run test suite:
 
 test/fips_test_suite
 Run test suite:
 
 test/fips_test_suite


@@ -23,18 +27,21 @@ again should complete without errors.
 Run test vectors: 
 
 1. Download an appropriate set of testvectors from www.openssl.org/docs/fips
 Run test vectors: 
 
 1. Download an appropriate set of testvectors from www.openssl.org/docs/fips

-   those for 2007 are OK.
+   only the fips-2.0 testvector files are usable for complete tests.

 
 2. Extract the files to a suitable directory.
 
 3. Run the test vector perl script, for example:
 
    cd fips
 
 2. Extract the files to a suitable directory.
 
 3. Run the test vector perl script, for example:
 
    cd fips

-   perl fipsalgtest.pl --disable-v2 --dir=/wherever/stuff/was/extracted
+   perl fipsalgtest.pl --dir=/wherever/stuff/was/extracted

 
 4. It should say "passed all tests" at the end. Report full details of any
    failures.
 
 
 4. It should say "passed all tests" at the end. Report full details of any
    failures.
 

+If you wish to use the older 1.2.x testvectors (for example those from 2007)
+you need the command line switch --disable-v2 to fipsalgtest.pl
+

 Examine the external symbols in fips/fipscanister.o they should all begin
 with FIPS or fips. One way to check with GNU nm is:
 
 Examine the external symbols in fips/fipscanister.o they should all begin
 with FIPS or fips. One way to check with GNU nm is:
 


@@ -117,8 +124,6 @@ reports.
 
 Known issues:
 
 
 Known issues:
 

-Algorithm tests are pre-2011.
-The fipslagtest.pl script wont auto run new algorithm tests such as DSA2.

 Code needs extensively reviewing to ensure it builds correctly on 
 supported platforms and is compliant with FIPS 140-2.
 The "FIPS capable OpenSSL" is still largely untested, it builds and runs
 Code needs extensively reviewing to ensure it builds correctly on 
 supported platforms and is compliant with FIPS 140-2.
 The "FIPS capable OpenSSL" is still largely untested, it builds and runs