Re: fips.so file package

On Thu, 1 Feb 2024 at 16:03, Wall, Stephen <stephen.wall@redcom.com> wrote:

> Why does the build place fips.so (the FIPS provider for openssl) in
> “FreeBSD-utilities” instead of “FreeBSD-openssl-lib”?  Is that an oversight?
>
> Related – I’d think openssl.cnf would be better placed in
> “FreeBSD-openssl-lib” with libcrypto and libssl than in “FreeBSD-openssl”.
>
>
>
> (And yes, I know the fips.so built by FreeBSD is not FIPS validated.)
>

The FreeBSD-utilities package tends to contain anything which is not marked
to go in some other package so yes, this is an oversight which could be
fixed by adding 'PACKAGE= openssl-lib' to
secure/lib/libcrypto/modules/fips/Makefile or possibly
secure/lib/libcrypto/Makefile.inc. If openssl.cnf is something only used at
compile time, that should also go in openssl-lib.



>