Hi,
I have installed fips object module 1.2.2 with
compatible standard openssl library version 0.9.8r, supposed to be the
latest FIPS capable installation. I have written a simple application for
fips mode verification. Its working fine when compiling with gcc but i need
to use g++ with which its rightly giving the error that initializer string
too long for the array FINGERPRINT_ascii_value[40] defined in
fips_premain.c. Obviously i cannot modify this since the file itself is a
part of validation.
This issue has been raised years ago but all threads ended up
with suggesting to modify fipsld (since this script is not part of
validation) so that premain.c is compiled with gcc and rest of the
application with g++. Is there any alternative solution ? I have a doubt
that if there any modification takes place in fips_premain.c while
installation of object module which i got missed and my post installation
premain.c file still containing a string that otherwise supposed to be
replaced by a shorter HMAC string .
-Raghib
