Skip to content

Latest commit

 

History

History
24 lines (21 loc) · 1 KB

INSTALL.FIPS.md

File metadata and controls

24 lines (21 loc) · 1 KB
Raw

stunnel FIPS install notes

Unix HOWTO

  • Only dynamic linking of the FIPS-enabled OpenSSL is currently supported, i.e. FIPS-enabled OpenSSL has to be configured with "shared" parameter.
  • FIPS mode is autodetected if possible. It can be forced with: ./configure --enable-fips or disable with: ./configure --disable-fips

WIN32 HOWTO

  • On 32-bit Windows install one of the following compilers:
    • MSVC 8.0 (VS 2005) Standard or Professional Edition
    • MSVC 9.0 (VS 2008) any edition including Express Edition
  • On 64-bit Windows install one of the following compilers:
    • MSVC 8.0 (VS 2005) Standard or Professional Edition
    • MSVC 9.0 (VS 2008) Standard or Professional Edition
  • Build FIPS-compliant OpenSSL DLLS according to: https://www.openssl.org/docs/fips/UserGuide-2.0.pdf
  • Build stunnel normally with MSVC or Mingw. Mingw build requires DLL stubs. Stubs can be built with: dlltool --def ms/libeay32.def --output-lib libcrypto.a dlltool --def ms/ssleay32.def --output-lib libssl.a