Linking OpenSSL-FIPS application

[Jacques Lebastard]

Title: Evidian Signature

Hi all, I'm trying to build an OpenSSL-FIPS application using static libeayfips32.lib library. Environment: OpenSSL 0.9.8k + OpenSSL-FIPS 1.2 + nasm 2.07 + Visual Studio 2005 (VC8). As explained in section 5.3.2 of OpenSSL FIPS 140-2 User Guide, I derived a .mak file from nt.mak. That makefile invokes fipslink.pl. Unfortunately, the perl script fails while checking the hash of fips_premain.c file: perl F:\OPENSSL-FIPS\fips\fipslink.pl /nologo /subsystem:windows /machine:X86 /map /out:Debug\OpenSSLFIPSTest.exe @C:\DOCUME~1\JACQUE~1.LEB\LOCALS~1\Temp\nmA108.tmp ***HASH VALUE MISMATCH FOR FILE fips_premain.c *** at F:\OPENSSL-FIPS\fips\fipslink.pl line 79. NMAKE : fatal error U1077: 'C:\Perl\bin\perl.EXE' : code retour '0x9' Stop. I modified the fipslink.pl to check the hash of fipscanister.lib file first and this one succeeds. Both fips_premain.c and fips_premain.c.sha1 where copied from .\openssl-fips-1.2\out32dll. The computed hash value (9288187a74e4e795c6c2a3178c362b416e39a371) does not match the hash file: 9e5ddba185ac446e0cf36fcf8e1b3acffe5d0b2c Why am I getting a wrong hash value on fips_premain.c file only? A file format difference? -- Jacques LEBASTARD EVIDIAN - Enterprise SSO R&D Tel: +33 1 30 80 77 86