Actually it looks like when I ran the tests using the OpenSSL FIPS library which I built using Ubuntu build script, the content of FIPS_SIGNATURE seemed to be empty. Can anyone tell me how was the value of sig and FIPS_SIGNATURE (near fips.c line 222) was computed and assigned? Thanks. On Wed, Feb 24, 2016 at 5:59 PM, cloud force <cloud.force858 at gmail.com> wrote: > I built the FIPS capable OpenSSL in the standard way (i.e. ./config fips; make; > make install) and it worked. > > After some tracing on the source code of fips.c I found that the mismatch > error was due to the fact that the content of the two variables "sig" and > "FIPS_SIGNATURE" are different when the OpenSSL lib was built using the > Ubuntu build script. When building the lib using the standard way, the > content of "sig" and "FIPS_SIGNATURE" are the same. > > Does anyone know what could cause the content of "sig" and > "FIPS_SIGNATURE" to be different (and hence causes the "fingerprint does > not match" error)? > > Thanks and any suggestions are truly appreciated. > > > > On Tue, Feb 23, 2016 at 5:01 PM, Dr. Stephen Henson <steve at openssl.org> > wrote: > >> On Tue, Feb 23, 2016, cloud force wrote: >> >> > Hi All: >> > >> > I built the FIPS modules on Ubuntu platform and was trying to build the >> > FIPS capable OpenSSL library. >> > >> > The build went fine but when I ran the following test, the fingerprint >> > error showed up: >> > >> > *OPENSSL_FIPS=1 openssl md5* >> > >> >> I suggest you first try building the FIPS capable OpenSSL in the standard >> way >> i.e. >> >> ./config fips >> make >> >> and see if you get the same problem. >> >> Steve. >> -- >> Dr Stephen N. Henson. OpenSSL project core developer. >> Commercial tech support now available see: http://www.openssl.org >> -- >> openssl-users mailing list >> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users >> > > > > -- > Thanks, > Rich > > -- Thanks, Rich -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160224/212069d6/attachment.html>
