Cannot get openssl-1.0.1c into fips mode

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Cannot get openssl-1.0.1c into fips mode

ken@bitzermobile.com

I have the exact issue as this link: http://openssl.6102.n7.nabble.com/Cannot-get-openssl-1-0-1-into-fips-mode-td6198.html#a33446036

 

I am trying to build a static shared library using windows win32. following the same exact steps. I built fips fine and all self test worked.  

 

I am using Visual studio sdk 2010 sp1 the same as Jacob

 

Opening the VS SDK command line then entered commands:

 

setenv /x86 /2008 /Release

 

set target_platform=x86

set PROCESSOR_ARCHITECTURE=x86

set path=%path%;C:\"Program Files (x86)"\nasm

set FIPSDIR=\dev\BMAX\external\openssl-1.0.1c\windows\fips-2.0

 

perl Configure VC-WIN32 fips enable-static-engine -DENABLE-CAPIENG

ms\do_nasm

 

I did the following changes as Dr. Henson suggested:  LFLAGS= /fixed /DYNAMICBASE:No

 

nmake -f ms\ntdll.mak

 

from openssl or calling  it from the shared dll I get:

C:\dev\BMAX\common\testCertMgrAPI\Debug>openssl md5 ..\capi_debug.log

912:error:2D06B06F:FIPS routines:FIPS_check_incore_fingerprint:fingerprint does not match:.\fips\fips.c:229:

 

 

Ken Montagna