Hi,
I'm trying to use OpenSSL 1.0.1e with fips module 2.0.4 on Win7 (64bit).
set_fips_mode(1) fails with "error:2D06B06F:FIPS
routines:FIPS_check_incore_fingerprint:fingerprint does not match".
While searching for the cause, I noticed that the unit test ("nmake -f
ms\ntdll.mak test") fails for both the container and OpenSSL library.
The library test fails with:
Curve defined by Weierstrass equation
y^2 = x^3 + a*x + b (mod 0x17)
a = 0x1
b = 0x1
Point is not on curve: x = 0xD, y = 0xFFFFD21E
.\crypto\ec\ectest.c:318: ABORT
The fips module test fails with
link /nologo /subsystem:console /opt:ref /debug /map
/out:out32dll\fips_rsagtest
.exe @C:\Users\NORKAL~1\AppData\Local\Temp\nm854.tmp
LINK : fatal error LNK1104: cannot open file 'out32dll\fips_rsagtest.exe'
Second stage Link failure at util\fipslink.pl line 75.
NMAKE : fatal error U1077: 'C:\Perl\bin\perl.EXE' : return code '0x19'
My question is: Are the failing self tests the reason for
set_fips_mode() to fail ? What would be the best way to debug the
failing set_fips_mode() ?
On Win7 32bit, all works well after adding "/DYNAMICBASE:NO /FIXED" in
the link process, but this doesn't help on 64bit. (I'm using the no_asm
build on both.)
Regards,
Jan
--
Jan Willamowius, [email protected], http://www.gnugk.org/
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
