Re: Cannot get openssl-1.0.1 into fips mode

2012-03-07 Thread Jacob White
With the /DYNAMICBASE:No option I get the same problems. Thanks for the advise, at this point I think I am moving my efforts to linux or an early version of VC++ and see if that works. On Wed, Mar 7, 2012 at 10:49 AM, Jacob White wrote: > Still have the problem. It looks to me like the OPENSSLDIR

Re: Cannot get openssl-1.0.1 into fips mode

2012-03-07 Thread Jacob White
Still have the problem. It looks to me like the OPENSSLDIR location does not exist. Even when I set OPENSSLDIR with: "perl configure VC-WIN32 fips enable-static-engine --prefix=c:\openssl\dir" After I finish the build c:\openssl\dir does not exist. On Tue, Mar 6, 2012 at 12:16 PM, Dr. Stephen Hens

Re: Cannot get openssl-1.0.1 into fips mode

2012-03-06 Thread Dr. Stephen Henson
On Tue, Mar 06, 2012, Jacob White wrote: > I added the /fixed and it worked at first. > > >From the command line I called: > openssl version -a > "Warning: can't open config file: /usr/local/ssl/openssl.cnf" > . > . > . > It displays other config settings. > > Then I call: > set OPENSSL_FIPS=1 >

Re: Cannot get openssl-1.0.1 into fips mode

2012-03-06 Thread Jacob White
I added the /fixed and it worked at first. >From the command line I called: openssl version -a "Warning: can't open config file: /usr/local/ssl/openssl.cnf" . . . It displays other config settings. Then I call: set OPENSSL_FIPS=1 openssl md5 README Output: "5320:error:2D06B06F:FIPS routines:FIPS_

Re: Cannot get openssl-1.0.1 into fips mode

2012-03-06 Thread Dr. Stephen Henson
On Tue, Mar 06, 2012, Jacob White wrote: > I am using Windows 7 Professional Service Pack 1 with Visual Studio 2010 > (So, VC++ 2010). > When building the FIPS capable OpenSSL after ms\do_nasm edit the makefile ms\ntdll.mak and try adding /fixed to the line with LFLAGS on it. Steve. -- Dr Steph

Re: Cannot get openssl-1.0.1 into fips mode

2012-03-06 Thread Jacob White
I am using Windows 7 Professional Service Pack 1 with Visual Studio 2010 (So, VC++ 2010). On Mon, Mar 5, 2012 at 3:57 PM, Dr. Stephen Henson wrote: > On Mon, Mar 05, 2012, Jacob White wrote: > > > After downloading openssl-1.0.1beta3 and using "perl Configure VC-WIN32 > > fips enable-static-engin

Re: Cannot get openssl-1.0.1 into fips mode

2012-03-05 Thread Dr. Stephen Henson
On Mon, Mar 05, 2012, Jacob White wrote: > After downloading openssl-1.0.1beta3 and using "perl Configure VC-WIN32 > fips enable-static-engine" before ms\do_nasm. I get the same errors with > different numbers. > > set OPENSSL_FIPS=1 > openssl md5 README > Error: > "4076:error:2D06B06F:FIPS_routi

Re: Cannot get openssl-1.0.1 into fips mode

2012-03-05 Thread Jacob White
After downloading openssl-1.0.1beta3 and using "perl Configure VC-WIN32 fips enable-static-engine" before ms\do_nasm. I get the same errors with different numbers. set OPENSSL_FIPS=1 openssl md5 README Error: "4076:error:2D06B06F:FIPS_routines:FIPS_check_incore_fingerprint:fingerprint does not mat

Re: Cannot get openssl-1.0.1 into fips mode

2012-03-05 Thread Dr. Stephen Henson
On Mon, Mar 05, 2012, Jacob White wrote: > >From the command prompt I run: > openssl version -a > Error: "5156:error:2D06B06F:FIPS > routines:FIPS_check_incore_fingerprint:fingerprint does not > match:.\fips\fips.c:229:" > > set OPENSSL_FIPS=1 > openssl md5 README > Error: "2456:error:2D06B06F:FI

Re: Cannot get openssl-1.0.1 into fips mode

2012-03-05 Thread Jacob White
>From the command prompt I run: openssl version -a Error: "5156:error:2D06B06F:FIPS routines:FIPS_check_incore_fingerprint:fingerprint does not match:.\fips\fips.c:229:" set OPENSSL_FIPS=1 openssl md5 README Error: "2456:error:2D06B06F:FIPS routines:FIPS_check_incore_fingerprint:fingerprint does n

Re: Cannot get openssl-1.0.1 into fips mode

2012-02-29 Thread Dr. Stephen Henson
On Wed, Feb 29, 2012, Jacob White wrote: > Using windows I have compiled an tested the fips 2.0 module and it is good. > I then compile and build the fips compatible openssl-1.0.1 with the fips > option and run the built in tests. Every thing is fine. I then add the > openssl-1.0.1\out32dll into m

Cannot get openssl-1.0.1 into fips mode

2012-02-29 Thread Jacob White
Using windows I have compiled an tested the fips 2.0 module and it is good. I then compile and build the fips compatible openssl-1.0.1 with the fips option and run the built in tests. Every thing is fine. I then add the openssl-1.0.1\out32dll into my system path. with 7zip i extract the compressed