As far as I understand, a new Makefile is provided in the openssl_source directory to specifically build the FIPS mode libraries. The make install from the main Makefile in the Linux directory refers to this file in all cases:
|
$(MAKE) -C ../openssl_source/ install |
But the makefile in the openssl_source throws an error if the FIPS library is not built.
|
$(error "Missing directory : $(OSSL_FIPS_INSTALL_DIR). Have you built the FIPS module yet?") |
This creates the entire build script to terminate prematurely when calling make install, eventhough the actual non-FIPS library is installed. It is creates confusion where it should not be treated as an error.
As far as I understand, a new Makefile is provided in the
openssl_sourcedirectory to specifically build the FIPS mode libraries. Themake installfrom the main Makefile in theLinuxdirectory refers to this file in all cases:intel-sgx-ssl/Linux/Makefile
Line 82 in 1f99dd7
But the makefile in the
openssl_sourcethrows an error if the FIPS library is not built.intel-sgx-ssl/openssl_source/Makefile
Line 71 in 1f99dd7
This creates the entire build script to terminate prematurely when calling
make install, eventhough the actual non-FIPS library is installed. It is creates confusion where it should not be treated as an error.