On 07/15/2015 01:34 PM, Philip Bellino wrote: > Hello, > > We are testing our FIPS implementation which is based on openssl-1.0.2a > and openssl-fips-2.0.9. > > We are executing tests on the target machine (which doesn't support > running perl scripts so we cannot run fipsalgtest.pl) > > that are included in the openssl-fips-2.0.9/fips directory, using > request files > > provided by a test/validation company. > > > > All tests seem to run fine (no errors output to screen) except for an > RSA2 KeyGen test, during which the following error text appears: > > > > ./fips_rsagtest AlgCore/KeyGen_186-3.req /tmp/KeyGen_186-3.rsp > > FATAL parse error processing line 16 > > FATAL RSAGTEST file processing error > > > > Any help would be most appreciated. The most likely cause is defective test vectors; that's quite common and understandable given the labor intensive nature of the CAVS tool. You could test your setup by processing one of the test vector sets used for recent #1747 platform testing, for instance: http://openssl.com/testing/validation-2.0/testvectors/OSF_2859_OE36.results.tar.gz ...which is the most recent officially confirmed one, from last week. Note the the format of the test vectors changes over time, so older test vectors are of limited value. The name your test lab gave that request file could be a clue too; compare your request file against the known good one above. Also note that if you're trying for a new validation (which is the only reason I can think of for attempting to do algorithm tests) you're in for a painful surprise; some non-trivial code hacking will be necessary to meet new requirements imposed since the #1747 validation was obtained. -Steve M. -- Steve Marquess OpenSSL Software Foundation, Inc. 1829 Mount Ephraim Road Adamstown, MD 21710 USA +1 877 673 6775 s/b +1 301 874 2571 direct marquess at opensslfoundation.com marquess at openssl.com gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc
