After downloading openssl-1.0.1beta3 and using "perl Configure VC-WIN32
fips enable-static-engine" before ms\do_nasm. I get the same errors with
different numbers.

set OPENSSL_FIPS=1
openssl md5 README
Error:
"4076:error:2D06B06F:FIPS_routines:FIPS_check_incore_fingerprint:fingerprint
does not match:.\fips\fips.c:229:"

openssl sha1 README
Error:
"5200:error:2D06B06F:FIPS_routines:FIPS_check_incore_fingerprint:fingerprint
does not match:.\fips\fips.c:229:"

openssl version -a
Error:
"5156:error:2D06B06F:FIPS_routines:FIPS_check_incore_fingerprint:fingerprint
does not match:.\fips\fips.c:229:"

On Mon, Mar 5, 2012 at 11:13 AM, Dr. Stephen Henson <[email protected]>wrote:

> On Mon, Mar 05, 2012, Jacob White wrote:
>
> > >From the command prompt I run:
> > openssl version -a
> > Error: "5156:error:2D06B06F:FIPS
> > routines:FIPS_check_incore_fingerprint:fingerprint does not
> > match:.\fips\fips.c:229:"
> >
> > set OPENSSL_FIPS=1
> > openssl md5 README
> > Error: "2456:error:2D06B06F:FIPS
> > routines:FIPS_check_incore_fingerprint:fingerprint does not
> > match:.\fips\fips.c:229:"
> >
> > openssl sha1 README
> > Error: "2560:error:2D06B06F:FIPS
> > routines:FIPS_check_incore_fingerprint:fingerprint does not
> > match:.\fips\fips.c:229:"
> >
> > My exact build procedure is:
> > with 7zip i extract the compressed files
> > using visual studio command prompt I cd to the openssl-fips-2.0 folder
> > set fipsdir=c:\fips_dir (Existing Empty folder)
> > set tmp=c:\tmp_dir (Existing Empty folder)
> > ms\do_fips
> > out32dll\fips_test_suite (passes)
> > then cd to openssl-1.0.1 beta2 folder
>
> You need:
>
> perl Configure VC-WIN32 fips
>
> in here before ms\do_nasm.
>
> > ms\do_nasm
> > nmake -f ms\ntdll.mak
> > nmake -f ms\ntdll.mak test (passes)
> >
>
> Steve.
> --
> Dr Stephen N. Henson. OpenSSL project core developer.
> Commercial tech support now available see: http://www.openssl.org
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [email protected]
> Automated List Manager                           [email protected]
>

Reply via email to