Re: FIPS 2.0: fipsld on cross-compile

2012-07-23 Thread Dr. Stephen Henson
On Sun, Jul 22, 2012, AJ wrote: Hi Steve, Thanks for all the help -- I think I've things sorted out now. Here are some of the issues I've had cross-compiling for Android.  Just some feedback -- maybe they'll help someone running into the same. 1) Building as shared libraries is

Re: FIPS 2.0: fipsld on cross-compile

2012-07-22 Thread AJ
of the quick responses and support. Regards, AJ - Original Message - From: Dr. Stephen Henson st...@openssl.org To: openssl-users@openssl.org Cc: Sent: Friday, July 20, 2012 4:22 PM Subject: Re: FIPS 2.0: fipsld on cross-compile On Fri, Jul 20, 2012, AJ wrote: OK, that worked -- built

FIPS 2.0: fipsld on cross-compile

2012-07-20 Thread AJ
1) I am cross-compiling a static FIPS enabled OpenSSL library for Android (using Linux host). I have generated the libssl.a and lib crypto.a. I am trying to use the fipsld tool, as documented in Sec 5.3.1  in the User Guide. However, I am running into the following error:

Re: FIPS 2.0: fipsld on cross-compile

2012-07-20 Thread Dr. Stephen Henson
On Fri, Jul 20, 2012, AJ wrote: 1) I am cross-compiling a static FIPS enabled OpenSSL library for Android (using Linux host). I have generated the libssl.a and lib crypto.a. I am trying to use the fipsld tool, as documented in Sec 5.3.1  in the User Guide. However, I am running into

Re: FIPS 2.0: fipsld on cross-compile

2012-07-20 Thread AJ
why? - Original Message - From: Dr. Stephen Henson st...@openssl.org To: openssl-users@openssl.org Cc: Sent: Friday, July 20, 2012 1:35 PM Subject: Re: FIPS 2.0: fipsld on cross-compile On Fri, Jul 20, 2012, AJ wrote: 1) I am cross-compiling a static FIPS enabled OpenSSL library

Re: FIPS 2.0: fipsld on cross-compile

2012-07-20 Thread Dr. Stephen Henson
On Fri, Jul 20, 2012, AJ wrote: OK, that worked -- built my library using fipsld.  However, on running, I am STILL getting fingerprint validation failure when calling FIPS_mode_set(1). 1552985864:error:2D06B06F:FIPS routines:FIPS_check_incore_fingerprint:fingerprint does not