On Wed March 25 2009, Uma G. Nayak wrote: > Hi, > > Ok. I ran the fips_test_suite.exe and checked for the system information. I > have 2 situations. >
You have had a reply for your #1 case - you should be able to make progress on that one. Your #2 case - you are correct, a P-IV does SSE2 very well - - this one is a head scratcher. Better just consider this one an independent problem to be solved after dealing with #1. Mike > 1. One of the system does not support FIPS mode operation. It's an AMD Athlon > XP which does not support SSE2. Hence I built Openssl dlls using no-sse2 > flag. Even after using these new dlls I am not able to start my server. > > I want to know whether the steps I followed for building Openssl are proper. > Details: I am using Openssl-fips-1.2 and Openssl-0.9.8j modules. > > Step I for building Openssl-fips-1.2: > > perl Configure VC-WIN32 no-sse2 > vcvars32.bat > ms\do_fips > > Step II for building Openssl-0.9.8j: > > perl Configure VC-WIN32 no-asm fips --with-fipslibdir= <path_of dlls got from > previous step> > ms\do_ms > vcvars32.bat > nmake -f ms\ntdll.mak > > Is this the right way to build? If yes, what could be wrong that the server > is still not starting? > > 2. On the second machine, which is a Pentium 4 D, fips_test_suite showed all > successful tests. System configuration information did not give any hint on > SSE2 support. But Pentium 4 D supports SSE2 and above. Still why server is > not able to start? > > Can you guys out there see anything? Please tell me. > > Regards, > Uma > > -----Original Message----- > From: owner-openssl-us...@openssl.org > [mailto:owner-openssl-us...@openssl.org] On Behalf Of Michael S. Zick > Sent: Tuesday, March 24, 2009 7:27 PM > To: openssl-users@openssl.org > Subject: Re: Server crash while starting service > > On Mon March 23 2009, Uma G. Nayak wrote: > > Hi, > > > > fips_test_suite executable runs just fine on these machines. All its tests > > are successful. > > > > How to check for SSE2 support on these machines? I have no clue about it. > > > > Some OS make it easy, others make it hard(er) - - - > > First, make a list of processor make/model shown by whatever system info > utility you have; > > Are they the same, different? If different, any pattern with the machines > that don't work? > If so, check with the published processor information, see if SSE2 is > specifically mentioned. > > Mike > > Regards, > > Uma > > > > -----Original Message----- > > From: owner-openssl-us...@openssl.org > > [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson > > Sent: Tuesday, March 17, 2009 8:58 PM > > To: openssl-users@openssl.org > > Subject: Re: Server crash while starting service > > > > On Tue, Mar 17, 2009, Uma G. Nayak wrote: > > > > > Hi All, > > > > > > We have upgraded Openssl in our application to Openssl-fips-1.2 along > > > with Openssl-0.9.8j, so that we can run the server (Apache webserver) in > > > FIPS mode. After the changes, the server works fine in FIPS mode, on most > > > of the systems, except for these two machines, where the server refuses > > > to start when launched from services.msc. The error it gives is: "Error > > > 1053, Failed to launch the application in a timely fashion" or sometimes: > > > "Could not start the requested service. Error code sytem-specific > > > errorcode - 1". > > > > > > When I try to run the application in the debug environment, it gives the > > > following error: > > > > > > FIPS_R_UNSUPPORTED_PLATFORM "unsupported platform". (Indicating that the > > > validity of the digest test is unknown for the current platform.) > > > > > > Could this be the same error condition causing the server crash in > > > release build. We have no way to find the cause in release build, because > > > no log files are created by the time the server stops loading itself. > > > > > > Note: The same application works fine, if I run it in NON-FIPS mode. > > > > > > All the machines are 32 bits machines, Windows XP, RAM 1 or 2 GB. Can > > > anyone let me know, why we are facing this problem and/or the workaround > > > for this? > > > > > > We are grateful for any help provided. > > > > > > > Try running the fips_test_suite executable on the failing machines. > > > > The failing ones aren't old machines not supporting SSE2 are they? If so you > > can still run the slower version with assembly language support, see user > > guide for details of how to build it. > > > > Steve. > > -- > > Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage > > OpenSSL project core developer and freelance consultant. > > Homepage: http://www.drh-consultancy.demon.co.uk > > ______________________________________________________________________ > > OpenSSL Project http://www.openssl.org > > User Support Mailing List openssl-users@openssl.org > > Automated List Manager majord...@openssl.org > > > > http://www.mindtree.com/email/disclaimer.html > > ______________________________________________________________________ > > OpenSSL Project http://www.openssl.org > > User Support Mailing List openssl-users@openssl.org > > Automated List Manager majord...@openssl.org > > > > > > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org > > http://www.mindtree.com/email/disclaimer.html > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org > > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
