Thank you for your valuable advice. I have determined the root problem and I believe it is important to inform you of the result.
In building the fips-1.2 source, I found that if I did it vanilla, it would choose 64 bit object mode. The AIX machine we are using is running in mixed-kernel mode and this is a hard requirement because of other legacy libraries that we utilize that we have not upgraded to 64-bit versions. We probably will have to figure out a way to do that now because the FIPS library is very important actually. The end result is that I had to change the makefile to -q32 to get it to work with the openssl-0.9.8j distribution, which smartly does use 32_64 mode and will FAIL if I did not change the fips-1.2 makefile. When I re-did this with fips-1.2 with no changes, the test ran fine. I would guess then in this case if I WAS able to link against properly and build openssl-0.9.8j then our application would be able to use fips mode just fine. Can you indicate however if there is any intention to support this mixed object mode? It would really help us enormously in this case and I believe I will run into the same problem when they try to get me to get this working on Solaris too. Any advice or information would be very gratefully received. Regards, Jeremy R. >Try running test/fips_test_suite on the validated tarball and 0.9.8j... if >that fails in a similar way then most likely cause is a compiler bug. > >Steve. >-- >Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage >OpenSSL project core developer and freelance consultant.
