@@ -75,12 +75,19 @@ if ("${WOLFSSL_PKG_TYPE}" MATCHES "normal")
7575
7676elseif ("${WOLFSSL_PKG_TYPE} " MATCHES "fipsready" )
7777 # Add preprocessor defines to CFLAGS, these match those placed into
78- # wolfssl/options.h by configure if using: "./configure" on a Unix/Linux platform. The options
79- # below have been chosen to match a FIPS Ready build, and are based on the example
80- # user_settings.h file located here:
78+ # wolfssl/options.h by configure if using: "./configure" on a Unix/Linux
79+ # platform. The options below have been chosen to match a FIPS Ready build,
80+ # and are based on the example user_settings.h file located here:
8181 # https://github.com/wolfSSL/wolfssl/blob/master/examples/configs/user_settings_fipsv5.h
82- # This list may be configurable depending on use case and desired optimizations, being careful
83- # not to break FIPS compatibility if targeting FIPS proper in the future.
82+ # This list may be configurable depending on use case and desired
83+ # optimizations, being careful not to break FIPS compatibility if targeting
84+ # FIPS proper in the future.
85+
86+ # NOTE: If using wolfSSL FIPS Ready or FIPS proper with this sample
87+ # application and run into the scenario where the verifyCore[] hash output
88+ # at runtime is empty, consider checking/increasing the size of the
89+ # MAX_FIPS_DATA_SZ define in 'wolfcrypt/src/fips_test.c'.
90+
8491 add_definitions (-DHAVE_FIPS -DHAVE_FIPS_VERSION=5 -DHAVE_FIPS_VERSION_MINOR=3
8592 -DHAVE_HASHDRBG -DHAVE_THREAD_LS -DHAVE_REPRODUCIBLE_BUILD
8693 -DFP_MAX_BITS=16384 -DSP_INT_BITS=8192 -DWOLFSSL_PUBLIC_MP
0 commit comments