diff --git a/docs/FIPS_INTEGRATION_GUIDE.md b/docs/FIPS_INTEGRATION_GUIDE.md index 734cdff4..b1818aa1 100644 --- a/docs/FIPS_INTEGRATION_GUIDE.md +++ b/docs/FIPS_INTEGRATION_GUIDE.md @@ -206,6 +206,7 @@ cd wolfssl-5.8.4-commercial-fips-ready ./configure --enable-fips=ready \ --enable-opensslcoexist \ + --enable-dh \ --prefix=/usr/local/wolfssl-fips \ CPPFLAGS="-I/usr/local/openssl/include -DWOLFSSL_OLD_OID_SUM -DWOLFSSL_DH_EXTRA" make -j$(nproc) @@ -216,6 +217,7 @@ Replace `--enable-fips=ready` with your bundle's tag (see FIPS Check Options abo **Required flags:** - `--enable-opensslcoexist` - Prevents symbol conflicts with OpenSSL (mandatory) +- `--enable-dh` - Enables DH, which is off by default in FIPS v7+ bundles (mandatory) - `-DWOLFSSL_OLD_OID_SUM` - Required for certificate compatibility (mandatory) - `-DWOLFSSL_DH_EXTRA` - Required for DH key operations (mandatory) - `-I/usr/local/openssl/include` - Path to your OpenSSL headers (adjust as needed) diff --git a/scripts/utils-wolfssl.sh b/scripts/utils-wolfssl.sh index 13558128..bc3a2c06 100644 --- a/scripts/utils-wolfssl.sh +++ b/scripts/utils-wolfssl.sh @@ -1,6 +1,6 @@ #!/bin/bash # -# Copyright (C) 2006-2024 wolfSSL Inc. +# Copyright (C) 2006-2026 wolfSSL Inc. # # This file is part of wolfProvider. # @@ -42,7 +42,7 @@ WOLFSSL_SOURCE_DIR=${SCRIPT_DIR}/../wolfssl-source WOLFSSL_INSTALL_DIR=${SCRIPT_DIR}/../wolfssl-install WOLFSSL_ISFIPS=${WOLFSSL_ISFIPS:-0} WOLFSSL_FIPS_VERSION=${WOLFSSL_FIPS_VERSION:-"5.2.4"} -WOLFSSL_FIPS_CONFIG_OPTS=${WOLFSSL_CONFIG_OPTS:-'--enable-opensslcoexist '} +WOLFSSL_FIPS_CONFIG_OPTS=${WOLFSSL_CONFIG_OPTS:-'--enable-opensslcoexist --enable-dh '} WOLFSSL_FIPS_CONFIG_CFLAGS=${WOLFSSL_CONFIG_CFLAGS:-"-I${OPENSSL_INSTALL_DIR}/include -DWOLFSSL_OLD_OID_SUM -DWOLFSSL_DH_EXTRA"} WOLFSSL_CONFIG_OPTS=${WOLFSSL_CONFIG_OPTS:-'--enable-all-crypto --with-eccminsz=192 --with-max-ecc-bits=1024 --enable-opensslcoexist --enable-sha'} WOLFSSL_CONFIG_CFLAGS=${WOLFSSL_CONFIG_CFLAGS:-"-I${OPENSSL_INSTALL_DIR}/include -DWC_RSA_NO_PADDING -DWOLFSSL_PUBLIC_MP -DHAVE_PUBLIC_FFDHE -DHAVE_FFDHE_6144 -DHAVE_FFDHE_8192 -DWOLFSSL_PSS_LONG_SALT -DWOLFSSL_PSS_SALT_LEN_DISCOVER -DRSA_MIN_SIZE=1024 -DWOLFSSL_OLD_OID_SUM "}