Hi,
1) Where should the no-asm option be given? With the Configure command or the
do_fips command? I have used no-asm with Configure command.
I have built as follows:
perl Configure VC-WIN32 no-asm
vcvars32.bat
ms\do_fips
2) out32dll\fips_test_suite gives the following:
FIPS-mode test application
1. Non-Approved cryptographic operation test...
a. Included algorithm (D-H)...successful
2. Automatic power-up self
test...ERROR:2d06c071:lib=45,func=108,reason=113:file=.\fips\fips.c:line=274:
FAILED!
Uma
-----Original Message-----
From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org]
On Behalf Of Dr. Stephen Henson
Sent: Wednesday, March 25, 2009 11:56 PM
To: openssl-users@openssl.org
Subject: Re: Server crash while starting service
On Thu, Mar 26, 2009, Uma G. Nayak wrote:
> Still no luck :(. Is it that FIPS mode doesnt work on AMD processors? In the
> Security Policy pdf at
> https://www.openssl.org/docs/fips/SecurityPolicy-1.2.pdf 8 platforms on
> which the Module was tested are listed:
>
> U1 Linux x86 no-asm Linux.2.6.18_i686_gcc-4.1.2 (OpenSuSE 10.2) no-asm U2
> Linux x86-64 no-asm Linux.2.6.20_x86-64_gcc-4.1.2 (OpenSuSE 10.2) U3 Linux
> x86 asm Linux.2.6.18_i686_gcc-4.1.2 (OpenSuSE 10.2) U4 Linux x86-64 asm
> Linux.2.6.20_x86-64_gcc-4.1.2 (OpenSuSE 10.2) W1 Windows x86 no-asm
> WinXP.SP2_i386_MSVC.8.0 no-asm W2 Windows x64 no-asm
> WinXP.SP2_x86-64_MSVC.8.0 no-asm W3 Windows x86 asm WinXP.SP2_i386_MSVC.8.0
> NASM, SSE2 W4 Windows x64 asm WinXP.SP2_x86-64_MSVC.8.0
>
> Does this mean that this module works only on Pentium platforms? What if i
> want to run an application in FIPS mode on a say, AMD machine without SSE2
> support? Or this 'SSE2 support' ends at lower Pentium machines?
>
Did you use the correct command to build the validated tarball i.e.:
ms\fo_fips no-asm
What happens when you do.
out32dll\fips_test_suite
afterwards? I don't have a non-sse2 WIN32 platform to test on.
Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
http://www.mindtree.com/email/disclaimer.html
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
