Skip to content

Commit d2eb697

Browse files
committed
Update configure command needed for FIPS builds in README.md.
1 parent 7b71610 commit d2eb697

File tree

1 file changed

+17
-5
lines changed

1 file changed

+17
-5
lines changed

README.md

Lines changed: 17 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -68,6 +68,8 @@ sudo make install
6868

6969
### wolfSSL
7070

71+
#### From Git
72+
7173
```
7274
git clone https://github.com/wolfssl/wolfssl.git
7375
cd wolfssl
@@ -81,12 +83,22 @@ make
8183
sudo make install
8284
```
8385

84-
Add `--enable-pwdbased` to the configure command above if using PKCS#12.
86+
#### From FIPS Bundle
87+
88+
Use this configure command:
89+
```
90+
./configure --enable-fips=v2 --enable-opensslcoexist --enable-cmac
91+
--enable-keygen --enable-sha --enable-des3 --enable-aesctr --enable-aesccm
92+
--enable-x963kdf CPPFLAGS="-DHAVE_AES_ECB -DWOLFSSL_AES_DIRECT
93+
-DWC_RSA_NO_PADDING -DWOLFSSL_PUBLIC_MP -DECC_MIN_KEY_SZ=192 -DSha3=wc_Sha3
94+
-DNO_OLD_SHA256_NAMES -DNO_OLD_MD5_NAME"
95+
```
96+
97+
Change `--enable-fips=v2` to `--enable-fips=ready` if using a FIPS Ready bundle.
8598

86-
Remove `-DWOLFSSL_PSS_LONG_SALT -DWOLFSSL_PSS_SALT_LEN_DISCOVER` and add
87-
`--enable-fips=v2` to the configure command above if building from a FIPS v2
88-
bundle and not the git repository. Change `--enable-fips=v2` to
89-
`--enable-fips=ready` if using a FIPS Ready bundle.
99+
#### Additional Options
100+
- Add `--enable-pwdbased` to the configure commands above if using PKCS#12.
101+
- Add `--enable-debug` to turn on debug logging.
90102

91103
### wolfEngine
92104

0 commit comments

Comments
 (0)