Can someone provide a brief explanation of the fips_premain.c functionality?
I used it over a year ago and am a little hazy on the details. 1) A checksum of the executable was performed during the first compile step of fipsld 2) That checksum was inserted into the binary during the second compile step 3) When the program is run that checksum is checked when fips_mode is entered. Presuming the above is correct, I also remember that toggling a few bits in the executeable (in a string for example) would cause FIPS mode to fail. However a new program I have just written doesn't exhibit this behavior. Have I got the functionality wrong? or is something else awry? Thanks Todd ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
