Fingerprint mismatch only for 32-bit FIPS binary

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Fingerprint mismatch only for 32-bit FIPS binary

Dipak B
Hi,

Appreciate any help on the following.

1) Built static binaries of FIPS capable OSSL which statically link to the windows runtime.

2) Consumed these binaries (libeaycompat32.lib, libeayfips32.lib and ssleay32.lib) into myapp.dll using msincore.pl


Result

1) FIPS mode gets set and working with 64-bit myapp.dll

2) But for 32-bit myapp.dll with same configuration, FIPS_mode_set() fails with reason 111 (Fingerprint mismatch)


Tried following

Since above 32-bit myapp.dll did not work, some additional configuration changes were made.

1) ReBuilt FIPS capable OSSL with additional LFLAGS of "/DynamicBase:No /Fixed".

2) ReBuilt 32-bit myapp.dll with above additional LFLAGS

But 32-bit myapp DLL does fail with fingerprint mismatch.

Questions

1) How do I get 32-bit myapp.dll working in FIPS mode?
FIPS_mode_set() returns
(100:error:2D06B06F:lib(45):func(107): reason (111):/FIPS/FIPS.c:232)

2) Why does "nmake -f nt.mak install" not copy "libeaycompat32.lib"? Is this simply dropped because of EOL of FOM?

3) Are additional LFLAGS required ? 

Thanks.