We have been trying to get OpenSSL 1.0.1H with FIPS capability to work with our 
application.  We originally used all defaults to build both the FIPS and 
OpenSSL but ran into issues with dll conflicts.  We have tried several base 
address but because we have no idea what people are loading on their computers 
can't reliably select a base address.

One option we have tried is to remove the \fixed from the makefile:

               $(FIPSLINK) $(MLFLAGS) /fixed /map  /base:$(BASEADDR) 
/out:$(O_CRYPTO) /def:ms/LIBEAY32.def @<<

Can we be FIPS compliant without the "fixed"?  Will it fail in FIPS mode?

Thanks,

Dave

Reply via email to