On Thu, Feb 12, 2009, RussMitch wrote: > > No, the test/fips_test_suite does not run correctly, here's the results: > > FIPS-mode test application > > 1. Non-Approved cryptographic operation test... > a. Included algorithm (D-H)...successful > ERROR:2d072065:lib=45,func=114,reason=101:file=fips_rand_selftest.c:line=364: > 2. Automatic power-up self test...FAILED! >
The cause of that error is a failure in the Known Answer Test (KAT) for the PRNG. I'd say the most likely cause is the AES algorithm (which the PRNG uses) doesn't function correctly. I'd suggest you try "make test" and see if that works. If you get failures with that too it might be a compiler bug, see if there is a newer version available. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
