When openssl-1.0.1-stable-SNAP is configured for fips, and the environment variable OPENSSL_FIPS is set to 1, the following errors are encountered when the ms/test.bat is run on Microsoft Windows:
*************************************************************************** testenc start testenc C:\work\openssl-1.0.1-stable-SNAP-20110813\out32 test enc test base64 enc test rc4 Error setting cipher RC4 672:error:060A80A3:digital envelope routines:FIPS_DIGESTINIT:disabled for fips:. \fips\utl\fips_md.c:180: 672:error:060A60A3:digital envelope routines:FIPS_CIPHERINIT:disabled for fips:. \fips\utl\fips_enc.c:142: Error setting cipher RC4 2484:error:060A80A3:digital envelope routines:FIPS_DIGESTINIT:disabled for fips: .\fips\utl\fips_md.c:180: 2484:error:060A60A3:digital envelope routines:FIPS_CIPHERINIT:disabled for fips: .\fips\utl\fips_enc.c:142: ..\ms\testenc.bat and ..\ms\clear.out are different 40 00 << diff at char 1 of 1570 problems..... C:\work\openssl-1.0.1-stable-SNAP-20110813\out32> *************************************************************************** I would have assumed the tests would check the FIPS state so that all tests called in test.bat could be completed even though some would fail because that routine is not supported in fips mode. Ken ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
