Questions on FIPS_mode_set

[Shicai Hu]

I am writing a sample application both in Linux and Windows using OpenSSL FIPS mode.  In both of Linux and Windows, call FIPS_mode_set in the source code, and use fipsld in Linux and fipslink.pl in windows, all the build procedures followed the OpenSSL FIPS 140-2 User Guide.  However, when I run the application,  the windows application get the following error message:

 

2496:error:2A069066:FIPS routines:FIPS_mode_set:fips mode already set:fips.c:239:

Can I just ignore this error message, because it said fips mode already set? 

 

My Linux application doesn't have this issue.

 

Shicai

 

Shicai Hu <[EMAIL PROTECTED]> wrote:

Yes, you are right. The problem is gone away in VC 2005 ( Unfortunately I have only VC 2005 Beta version -old, but it works). VC 2001 plus service pack 6 was installed (which caused the problem).

 

Thanks for the help.

 

 

Shicai

"Dr. Stephen Henson" <[EMAIL PROTECTED]> wrote:

On Wed, Jul 12, 2006, Shicai Hu wrote:

> Hi Dr. Henson:
>
> Thank you very much.
>
> I followed the build instruction of User Guide (page 31) to build. But when I run
>
> nmake -f ms\ntdll.mak
>
> command, first time an error message always pop up:
>
> "fips_premain_dso.exe has encountered a problem and needs to close. ...."
>

Are you using Visual Studio 2003? That has problems with the FIPS build. VC++
6 and VS 2005 should be OK though.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]

---

Do you Yahoo!?
Next-gen email? Have it all with the all-new Yahoo! Mail Beta.

---

Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+ countries) for 2¢/min or less.