Comparing printed debug values that I put into the incore script, it looks like our compileris putting the signature somewhere between FIPS_rodata_start and FIPS_rodata_end resulting in the"fingerprint does not match segment aliasing" error. I can get around this by removing the -fPIC option from the Configure files (both fips and base), but then I get the straight "fingerprint does not match" error. Is this because I changed the Configure file in openssl-fips-2.0? It also seems incore is incorrectly calculating the location of FIPS_signature - it's out by 65536. Compensating for it in the incore script (I simply add 65536) however, doesn't appear to make any difference. Any advice anyone?
TJ.
