My issue has been resolved. In my case I was statically linking the OpenSSL so I needed to do the following before calling httpd configure:
export CC=fipsld
export FIPSLD_CC=gcc
This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery.
NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.
From: Jerry Blasdel/USA/CSC
To: users@xxxxxxxxxxxxxxxx
Date: 01/09/2013 11:00 AM
Subject: Compiling Apache httpd 2.4 with FIPS capable OpenSSL on Solaris
We are trying to get an Apache 2,4 HTTPD executable created from a Fips-capable OpenSSL on Solaris.
After building and running the tests on fips-2 and OpenSSL 1.0.1c we build Apache and when we try to start it up we get the following in the error_log:
[Wed Jan 09 16:21:30.066478 2013] [ssl:emerg] [pid 23726:tid 1] SSL Library Error: error:2D06B06F:FIPS routines:FIPS_check_incore_fingerprint:fingerprint does not match
[Wed Jan 09 16:21:30.066487 2013] [ssl:emerg] [pid 23726:tid 1] AH02312: Fatal error initialising mod_ssl, exiting.
Can anyone please provide me a place to start looking for a resolution?
Thanks in advance
|