Hi,
I built FIPS 1.1.1, the latest 0.9.7 OpenSSL snapshot from March 2, and was
able to also build the sample application mentioned in the User Guide
(hmac.exe). They all work OK, but I have some questions that I can't find
answers to, so I'd appreciate your help.
1. When I build OpenSSL, it creates 2 libraries - libeayfips32.lib and
libeaycompat32.lib. What is the difference and which one should be used?
2. I have an application that uses the "td" version (MTd) of the libeay
libraries, and the application also builds against other libraries that I
build myself. I get the D (MD), T(MT), TD(MTd), and DD(MDd) versions of the
libeay libraries by modifying the default nt.mak OpenSSL makefile.
I have modified the makefile for the application to use fipslink.pl (It's a
Windows environment) and also set the necessary variables. It builds fine,
but when it's run, it complains that:
apptool.exe
1520:error:2A07806E:FIPS routines:FIPS_check_dso:fingerprint does not
match:fips.c:212:
What am I doing wrong and how can I fix this?
Thanks much.
Regards,
Sesh
"$(OUTDIR)\apptool.exe" : "$(OUTDIR)" $(DEF_FILE) $(LINK32_OBJS)
SET FIPSD=F:\openssl\openssl-0.9.7-stable-SNAP-20070301\out32
SET FIPSLINK=$(PERL)
F:\NEW_OPENSSL_FIPS\openssl-fips-1.1.1\util\fipslink.pl
SET FIPSLIB_D=f:\openssl\openssl-0.9.7-stable-SNAP-20070301\lib
SET FIPS_LINK=link
SET FIPS_CC=cl
SET SHLIB_CFLAGS=$(CPP_PROJ) $(LIB_CFLAG)
SET FIPS_CC_ARGS=$(SHLIB_CFLAGS) -c
SET PREMAIN_DSO_EXE=
SET PREMAIN_SHA1_EXE=$(FIPSD)\fips_standalone_sha1.exe
SET FIPS_TARGET="$(OUTDIR)\apptool.exe"
SET FIPS_SHA1_EXE=$(FIPS_SHA1_EXE)
$(FIPSLINK) $(LINK32_FLAGS) /out:$(OUTDIR)\apptool.exe @<<
$(LINK32_OBJS) $(FIPSLIB_D)\fips_premain.obj $(FIPSLIB_D)\libssl.a
$(O_FIPSCANISTER)
<<
_________________________________________________________________
Rates near 39yr lows! $430K Loan for $1,399/mo - Paying Too Much? Calculate
new payment
http://www.lowermybills.com/lre/index.jsp?sourceid=lmb-9632-18226&moid=7581
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
