On Sun, Oct 17, 2010, aerow...@gmail.com wrote: > Ugh. This is worse than I thought. It's *intermittently* failing like > that. After a few more minutes, I tried it again, and got the expected > output. > > Is there some way to specify a base address during the creation of the DLL, > after the fipscanister is created? Would that invalidate it? > > The default appears to be 0x00d60000, and it works when loaded there. >
You can't modify the 1.2 module build process in any way but you can specify an alternate base address when you link against a newer version of OpenSSL such as 0.9.8o. One way to get more information would be to dump the fingerprinted data in the FIPS_incore_fingerprint() function along with the addresses when it works and when it fails. Then see if the addresses and/or the dumped binary data have changed. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
