Andy, I resolved the problem by changing the endian flag for Intel Macs in the configure file. See my note below. Perhaps this change to the configure file can be included in future releases. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - For the Intel Mac, change the Configure file. The value for darwin-i386-cc should be L_ENDIAN, not B_ENDIAN. Otherwise you'll get a fips_canister fingerprint mismatch.
"darwin-i386-cc","cc:-O3 -fomit-frame-pointer -fno-common -DL_ENDIAN:: -D_REENTRANT:MACOSX::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::::::::::: darwin-shared:-fPIC::.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib", - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Thanks, Mike Wilder Cimcor, Inc. -----Original Message----- From: Andy Polyakov via RT [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 7:02 AM To: [EMAIL PROTECTED] Cc: [email protected] Subject: Re: [openssl.org #1708] > I found the solution to this bug. The Mac Intel should be little endian, not > big endian. As was mentioned on openssl-dev, it's known problem, but unfortunately modifying FIPS 1.1.2 code is not an option. The problem was addressed earlier in regular branches. Case is being dismissed. A. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [EMAIL PROTECTED]
