On Mon, May 23, 2011, ciphertexto wrote: > On May 23, 2011, at 7:20 PM, Dr. Stephen Henson wrote: > > On Sun, May 22, 2011, Bill Durant wrote: > > > >> Hello, > >> > >> Has anyone been able to build a "working" 64-bit version of the > >> FIPS-capable OpenSSL on Mac OS X 10.6.7 (SnowLeopard)? > >> > >> I have built a 64-bit version of the fipscanister from openssl-fips-1.2.3 > >> on Mac OS X 10.6.7. > >> > >> But fips_shatest and the openssl command are core dumping when I do a > >> 'make test' > >> > >> For example: > >> > >> ./config fipscanisterbuild > >> make > >> make test (fips_shatest and openssl core dump at this step) > >> > > > > Does fips_test_suite run OK? > > > I ran fips_test_suite and it has been pegged for almost two hours on the > following: > > ===== > $ ./fips_test_suite > FIPS-mode test application > > 1. Non-Approved cryptographic operation test... > ===== > > The CPU is at 100% on fips_test_suite. It does not get past that. > > Any ideas? >
It can take a long time to execute sometimes as it performs two slow DH parameter generation operations. Retry it a few times. If it still doesn't complete try: OPENSSL_FIPS=1 util/shlib_wrap.sh apps/openssl version -a Note that the utilities in the 1.2.3 build come from an ancient version of OpenSSL 0.9.8 and to get a usable library you must build an FIPS capable OpenSSL using the 1.2.3 fipscanister.o and a recent 0.9.8 version. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
