Cassie Helms <cassie.helms@...> writes:
> Built fips_algvs on build system and scp'd to target system as suggested.
Hmm. I incorporated building fips_algvs into my build system and ran it from
the
rpm install on the target machine. I get different results now -- can anyone
point to what this might indicate, coupled with the fips fingerprint error?
# fips_algvs fips_test_suite post
FIPS-mode test application
FIPS 2.0 validated module 14 Mar 2012
DRBG AES-256-CTR DF test started
DRBG AES-256-CTR DF test OK
POST started
Integrity test started
ERROR:2D06B06F:lib=45,func=107,reason=111:file=fips.c:line=229
Integrity test Failed Incorrectly!!
DRBG AES-256-CTR DF test started
DRBG AES-256-CTR DF test OK
DRBG AES-256-CTR test started
DRBG AES-256-CTR test OK
DRBG SHA256 test started
DRBG SHA256 test OK
DRBG HMAC-SHA256 test started
DRBG HMAC-SHA256 test OK
DRBG P-256 SHA256 test started
DRBG P-256 SHA256 test OK
X9.31 PRNG keylen=16 test started
X9.31 PRNG keylen=16 test OK
X9.31 PRNG keylen=24 test started
X9.31 PRNG keylen=24 test OK
X9.31 PRNG keylen=32 test started
X9.31 PRNG keylen=32 test OK
Digest SHA1 test started
Digest SHA1 test OK
Digest SHA1 test started
Digest SHA1 test OK
Digest SHA1 test started
Digest SHA1 test OK
HMAC SHA1 test started
HMAC SHA1 test OK
HMAC SHA224 test started
HMAC SHA224 test OK
HMAC SHA256 test started
HMAC SHA256 test OK
HMAC SHA384 test started
HMAC SHA384 test OK
HMAC SHA512 test started
HMAC SHA512 test OK
CMAC AES-128-CBC test started
CMAC AES-128-CBC test OK
CMAC AES-192-CBC test started
CMAC AES-192-CBC test OK
CMAC AES-256-CBC test started
CMAC AES-256-CBC test OK
CMAC DES-EDE3-CBC test started
CMAC DES-EDE3-CBC test OK
Cipher AES-128-ECB test started
Cipher AES-128-ECB test OK
CCM test started
CCM test OK
GCM test started
GCM test OK
XTS AES-128-XTS test started
XTS AES-128-XTS test OK
XTS AES-256-XTS test started
XTS AES-256-XTS test OK
Cipher DES-EDE3-ECB test started
Cipher DES-EDE3-ECB test OK
Cipher DES-EDE3-ECB test started
Cipher DES-EDE3-ECB test OK
Signature RSA test started
Signature RSA test OK
Signature ECDSA P-224 test started
Signature ECDSA P-224 test OK
Signature ECDSA K-233 test started
Signature ECDSA K-233 test OK
Signature DSA test started
Signature DSA test OK
ECDH P-224 test started
ECDH P-224 test OK
POST Failed
Power-up self test failed
Old results below --
> ./fips_algvs fips_test_suite post
> FIPS-mode test application
> FIPS 2.0 validated module 14 Mar 2012
>
> DRBG AES-256-CTR DF test started
> DRBG AES-256-CTR DF test OK
> POST started
> Integrity test started
> Integrity test OK
> DRBG AES-256-CTR DF test started
> DRBG AES-256-CTR DF test OK
> DRBG AES-256-CTR test started
> DRBG AES-256-CTR test OK
> DRBG SHA256 test started
> DRBG SHA256 test OK
> DRBG HMAC-SHA256 test started
> DRBG HMAC-SHA256 test OK
> DRBG P-256 SHA256 test started
> DRBG P-256 SHA256 test OK
> X9.31 PRNG keylen=16 test started
> X9.31 PRNG keylen=16 test OK
> X9.31 PRNG keylen=24 test started
> X9.31 PRNG keylen=24 test OK
> X9.31 PRNG keylen=32 test started
> X9.31 PRNG keylen=32 test OK
> Digest SHA1 test started
> Digest SHA1 test OK
> Digest SHA1 test started
> Digest SHA1 test OK
> Digest SHA1 test started
> Digest SHA1 test OK
> HMAC SHA1 test started
> HMAC SHA1 test OK
> HMAC SHA224 test started
> HMAC SHA224 test OK
> HMAC SHA256 test started
> HMAC SHA256 test OK
> HMAC SHA384 test started
> HMAC SHA384 test OK
> HMAC SHA512 test started
> HMAC SHA512 test OK
> CMAC AES-128-CBC test started
> CMAC AES-128-CBC test OK
> CMAC AES-192-CBC test started
> CMAC AES-192-CBC test OK
> CMAC AES-256-CBC test started
> CMAC AES-256-CBC test OK
> CMAC DES-EDE3-CBC test started
> CMAC DES-EDE3-CBC test OK
> Cipher AES-128-ECB test started
> Cipher AES-128-ECB test OK
> CCM test started
> CCM test OK
> GCM test started
> GCM test OK
> XTS AES-128-XTS test started
> XTS AES-128-XTS test OK
> XTS AES-256-XTS test started
> XTS AES-256-XTS test OK
> Cipher DES-EDE3-ECB test started
> Cipher DES-EDE3-ECB test OK
> Cipher DES-EDE3-ECB test started
> Cipher DES-EDE3-ECB test OK
> Signature RSA test started
> Signature RSA test OK
> Signature ECDSA P-224 test started
> Signature ECDSA P-224 test OK
> Signature ECDSA K-233 test started
> Signature ECDSA K-233 test OK
> Signature DSA test started
> Signature DSA test OK
> ECDH P-224 test started
> ECDH P-224 test OK
> POST Success
> Power-up self test successful
>
> Thanks for looking at this.
>
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List openssl-users@...
> Automated List Manager majordomo@...
>
>
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
