I am attempting to build a FIPS-capable Openssl for an XScale processor (ARMV4I) running under Windows CE 5.0 (using openssl-1.0.1c and openssl-fips-2.0.1)
The following is an excerpt of the build messages: perl C:\nan\gem\iStar\Encryption\openssl_fips\util\msincore -dso out32dll_ARMV4I\libeay32.dll clarm.exe -DHMAC_SHA1_SIG=\"311835ad708f05264982ee96461b7a4160d82733\" /Fotmp32dll_ARMV4I\fips_premain.obj -Iinc32 -Itmp32dll_ARMV4I /MC /O1i /W3 /GF /Gy /nologo -DUNICODE -D_UNICODE -DOPENSSL_SYSNAME_WINCE -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DDSO_WIN32 -DNO_CHMOD -DOPENSSL_SMALL_FOOTPRINT -DOPENSSL_NO_CAPIENG -DOPENSSL_USE_IPV6=0 -D_WIN32_WCE=500 -DUNDER_CE=500 -DWCE_PLATFORM_CHAMELEON -DARM -D_ARM_ -DARMV4I -QRarch4T -QRinterwork-return -IC:\nan\gem\iStar\Encryption\openssl_fips\util\fips-2.0/include -IC:\nan\gem\iStar\Encryption\wcecompat/include -DOPENSSL_NO_RC2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_MD2 -DOPENSSL_NO_RIPEMD -DOPENSSL_NO_MDC2 -DOPENSSL_NO_BF -DOPENSSL_NO_CAST -DOPENSSL_NO_KRB5 -DOPENSSL_FIPS -DOPENSSL_NO_JPAKE -DOPENSSL_NO_STATIC_ENGINE /Zi /Fdtmp32dll_ARMV4I/lib -D_WINDLL -D_DLL -c C:\nan\gem\iStar\Encryption\openssl_fips\util\fips-2.0\lib/fips_premain. c The build appears to complete successfully. However, at run-time, entering FIPS mode fails and the following messages are produced: error stack: 2D079089 : error:2D079089:FIPS routines:fips_pkey_signature_test:test failure FIPS_mode_set: 2D06B06F: error:2D06B06F:FIPS routines:FIPS_check_incore_fingerprint:fingerprint does not match I have reviewed the build instructions carefully and believe all the build instructions have been adhered to. What needs to be changed for the signature to be properly embedded? -Joe
