On Tue, Oct 12, 2010, Lee Merrill wrote: > I had a problem after building as well, I built the fips-mode (version 1.2) > of openssl on LInux via running "./config fipscanisterbuild" and then > "make", this builds fine, and "make test" works, only fipscanister.o > doesn't have the strings that fipsld expects, when I run "strings > fipscanister.o | fgrep HMAC" all I see is "HMAC: digest not allowed in FIPS > mode". The other strings I got before with fips openssl 1.1 which have the > hash values (e.g. "HMAC-SHA1(fips_premain.c)= > 6a08d15c578f1258246181bf52134ae974aa5a80") are not present. This causes > fipsld to fail, any suggestions appreciated. >
Looks like you are using the old (1.1) version of fipsld: you need the 1.2 version. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
