Thank you for your input.
I rebuilt with nothing but config fips; the test you requested fails
with this:
FIPS-mode test application
1. Non-Approved cryptographic operation test...
a. Included algorithm (D-H)...successful
6385:error:2A068065:FIPS routines:FIPS_selftest_aes:selftest
failed:fips_aes_selftest.c:92:
2. Automatic power-up self test...FAILED!
LE
Dr. Stephen Henson wrote:
On Tue, Jul 17, 2007, Elia, Leonard F. wrote:
The Solaris version fails on test_sha. I thought perhaps this was a
problem with the SUN toolchain, so I rebuilt it using gcc 3.4.6 but it
still fails:
make[1]: *** [test_sha] Error 1
Items were built as:
tar xvf openssl-fips-1.1.1.tar
cd openssl-fips-1.1.1
./config fips --prefix=/usr/local/ssl-fips
make
make install
That isn't the approved build procedure. You must do:
./config fips
and *nothing* else otherwise it is a violation of the security policy.
Though that isn't the cause of the problem. When you build from validated
sources what does:
test/fips_test_suite
produce?
Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
