<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Calibri, sans-serif" size="2">
<div><font color="#1F497D">Hello All,</font></div>
<div><font color="#1F497D"> </font></div>
<div><font face="LiberationMono" size="2" color="#1F497D">Some details are given in the below link.(PAGE 13)</font></div>
<div><font face="Calibri, sans-serif"><a href="http://openssl.org/docs/fips/UserGuide-2.0.pdf"><font face="LiberationMono" size="2" color="#0000FF"><u>http://openssl.org/docs/fips/UserGuide-2.0.pdf</u></font></a></font></div>
<div><font face="Calibri, sans-serif" color="#0000FF"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> <font face="LiberationSerif" size="3" color="#000000"><b>HMAC-SHA-1 digest</b></font></font></div>
<div><font face="LiberationSerif" size="3">A HMAC-SHA-1 digest of a file using a specific HMAC key (the ASCII string</font></div>
<div><font face="LiberationSerif" size="3">“<font face="NimbusMonL-Bold"><b>etaonrishdlcupfm</b></font>”). Such digests are referred to in this document as “digests” or</font></div>
<div><font face="LiberationSerif" size="3">“fingerprints”. The digests are used for integrity checking to verify that the software in question</font></div>
<div><font face="LiberationSerif" size="3">has not been modified or corrupted from the form originally used as the basis of the FIPS 140-2</font></div>
<div><font face="LiberationSerif" size="3">validation.</font></div>
<div><font face="LiberationSerif" size="3"> </font></div>
<div><font face="Calibri, sans-serif">Trying to relate the following error code status from test Application:</font></div>
<div><font face="Calibri, sans-serif"><span style="background-color:#00FFFF">2D06B06F – (</span><font face="Courier New, monospace" size="2"><span style="background-color:#00FFFF">FIPS_F_FIPS_CHECK_INCORE_FINGERPRINT),</span></font><font face="Courier New, monospace" size="2" color="#A31515"><span style="background-color:#00FFFF">"FIPS_check_incore_fingerprint"</span></font><font face="Courier New, monospace" size="2"><span style="background-color:#00FFFF">},</span></font></font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Courier New, monospace" size="2">Please guide about this command.</font></div>
<div><font face="Courier New, monospace" size="2"> </font></div>
<div><font face="LiberationMono" size="3"><span style="background-color:#FFFF00">openssl sha1 -hmac etaonrishdlcupfm openssl-fips-2.0.9.tar.gz</span></font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Regards</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Ashwini Patil</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Tahoma, sans-serif" size="2">_____________________________________________<br>
<b>From:</b> Patil, Ashwini IN BLR STS <br>
<b>Sent:</b> Thursday, August 13, 2015 8:13 AM<br>
<b>To:</b> 'rt@openssl.org'<br>
<b>Subject:</b> RE: [openssl.org #3978] Openssl 1.0.2c include the FIPS 140-2 Object Module</font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Hello All,</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Appreciate for any suggestion.</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Currently no clue about the issue.</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Thanks&Regards</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Ashwini V Patil</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Tahoma, sans-serif" size="2">_____________________________________________<br>
<b>From:</b> Patil, Ashwini IN BLR STS <br>
<b>Sent:</b> Tuesday, August 04, 2015 8:24 AM<br>
<b>To:</b> 'openssl-dev@openssl.org'; 'openssl-users@openssl.org'; 'rt@openssl.org'<br>
<b>Cc:</b> Inbarajan, Prabhu IN BLR STS; Karunakaran, Sajith IN BLR STS; Reddy, Harshavardhana IN BLR STS; Karunakaran, Sajith IN BLR STS<br>
<b>Subject:</b> RE: Openssl 1.0.2c include the FIPS 140-2 Object Module</font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Hello All,</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Following steps are done to check the FIPS feasibility .</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">To check ASLR dependency the following link was referred. </font></div>
<div><font face="Calibri, sans-serif"><a href="http://openssl.6102.n7.nabble.com/FIPS-Module-1-2-build-with-Visual-Studio-2010-fails-self-tests-td36372.html"><font color="#0000FF"><u>http://openssl.6102.n7.nabble.com/FIPS-Module-1-2-build-with-Visual-Studio-2010-fails-self-tests-td36372.html</u></font></a><font color="#1F497D">
</font></font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Linker properties were changed in visual studio 2008 for the test application executable file.</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">The following flag was disabled ( which was enabled by default in 2008VS)</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Linker>Advanced Properties>Disable the "Randomized Base Address property “</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif">I have followed the below steps Integration of FIPS Complaint compiled OPENSSL Library with Visual Studio 2008<br>
====================================================================<br>
<br>
1. Open Visual Studio 2008<br>
<br>
2. File => New => Project => Visual C++ => Win 32 => Win32 Console Application=> Next => Empty Project => Finish
<br>
<br>
3. Right Click on source file => Add => Existing Items => C:\openssl-fips-2.0\fips\hmac\fips_hmactest.c
<br>
<br>
4. Right Click on Resources File => Add => Existing Items => libeayfips32.lib, ssleay32.lib & libeaycompat32.lib (from C:\openssl-1.0.1e-fips-compliant\out32) and C:\openssl-1.0.1e-simple\out32\libeay32.lib (OpenSSL simple Version)
<br>
<br>
5. Right Click on fips_hmactest.c=> Properties => C++ => General => Additional Include Directories : C:\usr\local\ssl\include => Finish
<br>
<br>
6. Compile the Project => Works Fine</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">We get the below error when run the exe:</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">ERROR:2D06B06F:LIB-45,FUNC=107,REASON=111:FILE=fips.c line=232</font></div>
<div><font face="Courier New, monospace" size="2">FIPSerr(FIPS_F_FIPS_CHECK_INCORE_FINGERPRINT,FIPS_R_FINGERPRINT_DOES_NOT_MATCH);<font face="Calibri, sans-serif" size="2" color="#1F497D"> </font></font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Note:</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">The libleay32.dll preferred address is 0xFB00000 in Q-Build</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Its different in case of Syngo normal build 0x10000000.</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Regards</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Ashwini Patil</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Tahoma, sans-serif" size="2">_____________________________________________<br>
<b>From:</b> Patil, Ashwini IN BLR STS <br>
<b>Sent:</b> Thursday, July 30, 2015 3:17 PM<br>
<b>To:</b> 'openssl-dev@openssl.org'; 'openssl-users@openssl.org'<br>
<b>Cc:</b> Inbarajan, Prabhu IN BLR STS; Karunakaran, Sajith IN BLR STS<br>
<b>Subject:</b> FW: Openssl 1.0.2c include the FIPS 140-2 Object Module</font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Hello All,</font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif">I have followed the below steps Integration of FIPS Complaint compiled OPENSSL Library with Visual Studio 2008<br>
====================================================================<br>
<br>
1. Open Visual Studio 2008<br>
<br>
2. File => New => Project => Visual C++ => Win 32 => Win32 Console Application=> Next => Empty Project => Finish
<br>
<br>
3. Right Click on source file => Add => Existing Items => C:\openssl-fips-2.0\fips\hmac\fips_hmactest.c
<br>
<br>
4. Right Click on Resources File => Add => Existing Items => libeayfips32.lib, ssleay32.lib & libeaycompat32.lib (from C:\openssl-1.0.1e-fips-compliant\out32) and C:\openssl-1.0.1e-simple\out32\libeay32.lib (OpenSSL simple Version)
<br>
<br>
5. Right Click on fips_hmactest.c=> Properties => C++ => General => Additional Include Directories : C:\usr\local\ssl\include => Finish
<br>
<br>
6. Compile the Project => Works Fine</font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif">The following code was used to set the fips mode in our application.</font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif"><span style="background-color:#FFFF00"><i>int mode = FIPS_mode(), ret = 0;</i></span></font></div>
<div><font face="Calibri, sans-serif"><span style="background-color:#FFFF00"><i>unsigned long err = 0;</i></span></font></div>
<div><font face="Calibri, sans-serif"><span style="background-color:#FFFF00"><i>if(mode == 0)</i></span></font></div>
<div><font face="Calibri, sans-serif"><span style="background-color:#FFFF00"><i>{</i></span></font></div>
<div><font face="Calibri, sans-serif"><span style="background-color:#FFFF00"><i>ret = FIPS_mode_set(1 );</i></span></font></div>
<div><font face="Calibri, sans-serif"><span style="background-color:#FFFF00"><i>err = ERR_get_error();</i></span></font></div>
<div><font face="Calibri, sans-serif"><span style="background-color:#FFFF00"><i>}</i></span></font></div>
<div><font face="Calibri, sans-serif"><span style="background-color:#FFFF00"><i>if(1 != ret)</i></span></font></div>
<div><font face="Calibri, sans-serif"><span style="background-color:#FFFF00"><i>DisplayError("FIPS_mode_set failed", err);</i></span></font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif">Get the following error code status:</font></div>
<div><font face="Calibri, sans-serif"><span style="background-color:#00FFFF">2D06B06F – (</span><font face="Courier New, monospace" size="2"><span style="background-color:#00FFFF">FIPS_F_FIPS_CHECK_INCORE_FINGERPRINT),</span></font><font face="Courier New, monospace" size="2" color="#A31515"><span style="background-color:#00FFFF">"FIPS_check_incore_fingerprint"</span></font><font face="Courier New, monospace" size="2"><span style="background-color:#00FFFF">},</span></font></font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif">Please guide me throught the error. </font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif">Kindly share your thoughts and let me know opinion and also provide us the steps how this error can be overcome?</font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">To check ASLR dependency the following link was referred. </font></div>
<div><font face="Calibri, sans-serif"><a href="http://openssl.6102.n7.nabble.com/FIPS-Module-1-2-build-with-Visual-Studio-2010-fails-self-tests-td36372.html"><font color="#0000FF"><u>http://openssl.6102.n7.nabble.com/FIPS-Module-1-2-build-with-Visual-Studio-2010-fails-self-tests-td36372.html</u></font></a><font color="#1F497D">
</font></font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Linker properties were changed in visual studio 2008 for the test application executable file.</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">The following flag was disabled ( which was enabled by default in 2008VS)</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Linker>Advanced Properties>Disable the "Randomized Base Address property “</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">There is no change in the error code.</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">We get the below error when run the exe:</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">ERROR:2D06B06F:LIB-45,FUNC=107,REASON=111:FILE=fips.c line=232</font></div>
<div><font face="Courier New, monospace" size="2">FIPSerr(FIPS_F_FIPS_CHECK_INCORE_FINGERPRINT,FIPS_R_FINGERPRINT_DOES_NOT_MATCH);<font face="Calibri, sans-serif" size="2" color="#1F497D"> </font></font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Regards</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Ashwini Patil</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Tahoma, sans-serif" size="2">_____________________________________________<br>
<b>From:</b> Patil, Ashwini IN BLR STS <br>
<b>Sent:</b> Friday, July 17, 2015 5:31 PM<br>
<b>To:</b> 'openssl-dev@openssl.org'<br>
<b>Cc:</b> Inbarajan, Prabhu IN BLR STS; CN, Sujai IN BLR STS; Reddy, Harshavardhana IN BLR STS<br>
<b>Subject:</b> RE: Openssl 1.0.2c include the FIPS 140-2 Object Module</font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Hello All,</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">I am using <span style="background-color:#FFFF00">windows 7 64-BIT Service Pack 1 OS .</span></font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Visual Studio 2008 (Visual studio tool used is normal 32-bit cmd prompt not cross compiler)</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Nasm - nasm-2.11.08</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Perl - ActivePerl-5.20.1.2000-MSWin32-x86-64int-298557 (1)</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"> </font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">I have used the below steps to integrate openssl-fips2.0.9 in openssl-1.0.2c :</font></div>
<div><font face="Verdana, sans-serif" size="2"><b>Procedure for FIPS Enabled OpenSSL Module Compilation</b><b> <br>
</b><b>=====================================================</b><b> <br>
</b> <br>
<b>=================================</b><b> <br>
</b><b> 1. Compile openssl-fips2.0 module</b><b> <br>
</b><b> =================================<br>
</b> a. Extract the contents of openssl-fips-2.0.9tar.gz to C:\openssl-fips-2.0.9\ <br>
b. Open Visual Studio 2008 Command Prompt. <br>
c. cd C:\openssl-fips2.0.9\ <br>
d. Copy all the contents of "C:\Program Files\NASM" in this source folder <br>
e. ms\do_fips [no-asm] (nmake -f ms\ntdll.mak & nmake -f ms\ntdll.mak install are included in this command) <br>
<br>
Compiled FIPS module is located at C:\usr\local\ssl\fips-2.0.9 <br>
<br>
<b>=======================================================</b><b> <br>
</b><b> 2. Integrate compiled openssl-fips2.0.9 in openssl-1.0.2c<br>
=======================================================<br>
</b> a. Extract the contents of openssl-1.0.1e.tar.gz to C:\openssl-1.0.2c-fips-compliant\ <br>
b. Open Visual Studio 2008 Command Prompt. <br>
c. cd C:\openssl-1.0.2c-fips-compliant\ <br>
d. Copy all the contents of "C:\Program Files\NASM" in this source folder <br>
<br>
e. perl Configure VC-WIN32 fips --with-fipslibdir=C:\usr\local\ssl\fips-2.0.9 <br>
f. ms\do_nasm <br>
g. nmake -f ms\nt.mak <br>
h. For Testing, use the following command: nmake -f ms\nt.mak test <br>
i. nmake -f ms\nt.mak install <br>
j. (If you want to create DLL files then Use the following commands nmake -f ms\ntdll.mak && nmake -f ms\ntdll.mak install) <br>
k. Compiled FIPS compliant OpenSSL exe is located at C:\usr\local\ssl\bin\openssl.exe <br>
l. Run C:\usr\local\ssl\bin\openssl.exe and type "version". You will be confirmed to get the following output. <br>
<b>=======================================</b><b> <br>
</b><b> ****OpenSSL 1.0.2c-fips 12 June 2015****</b><b> <br>
</b><b> =======================================</b> <br>
m. Compiled FIPS compliant OpenSSL fipslibeay32.lib, ssleay32.lib & libeaycompat32.lib are located at C:\openssl-1.0.1e-fips-compliant\out32 <br>
n. Compiled FIPS compliant OpenSSL fipslibeay32.dll & ssleay32.dll are located at C:\openssl-1.0.1e-fips-compliant\out32 <br>
</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D"><span style="background-color:#FFFF00">Build is successful and able to generate </span><font face="Verdana, sans-serif" size="2" color="#000000">fipslibeay32.lib, ssleay32.lib, libeaycompat32.lib & ssleay32.dll.</font></font></div>
<div><font face="Verdana, sans-serif" size="2">But <b>fipslibeay32.dll</b> is missing. Please guide me .</font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Verdana, sans-serif" size="2">When executed the command nmake -f ms\ntdll.mak I get the below error for the first time:</font></div>
<div><font face="Verdana, sans-serif" size="2">nmake -f ms\ntdll.mak</font></div>
<div><font face="Verdana, sans-serif" size="2"> </font></div>
<div><font face="Verdana, sans-serif" size="2"> Creating library out32dll\libeay32.lib and object out32dll\libeay32.exp</font></div>
<div><font face="Verdana, sans-serif" size="2">out32dll\fips_premain_dso.exe out32dll\libeay32.dll</font></div>
<div><font face="Verdana, sans-serif" size="2">2796:error:25078067:DSO support routines:WIN32_LOAD:could not load the shared li</font></div>
<div><font face="Verdana, sans-serif" size="2">brary:.\crypto\dso\dso_win32.c:179:filename(out32dll\libeay32.dll)</font></div>
<div><font face="Verdana, sans-serif" size="2">2796:error:25070067:DSO support routines:DSO_load:could not load the shared libr</font></div>
<div><font face="Verdana, sans-serif" size="2">ary:.\crypto\dso\dso_lib.c:232:</font></div>
<div><font face="Verdana, sans-serif" size="2">Get hash failure at \usr\local\ssl\fips-2.0\bin\fipslink.pl line 60.</font></div>
<div><font face="Verdana, sans-serif" size="2">NMAKE : fatal error U1077: 'C:\Perl64\bin\perl.EXE' : return code '0x1'</font></div>
<div><font face="Verdana, sans-serif" size="2">Stop.</font></div>
<div><font face="Verdana, sans-serif" size="2"> </font></div>
<div><font face="Verdana, sans-serif" size="2">Please provide your help for the same.</font></div>
<div><font face="Calibri, sans-serif" color="#1F497D">Please let me know if any steps are missed.</font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Arial, sans-serif" size="2">With best regards,</font></div>
<div><font face="Arial, sans-serif" size="2">Ashwini V Patil</font></div>
<div><font face="Arial, sans-serif" size="2"> </font></div>
<div><font face="Arial, sans-serif" size="2">Siemens Technology and Services Private Limited</font></div>
<div><font face="Arial, sans-serif" size="2">CT DC AA HC H1-FH STD IBP 6</font></div>
<div><font face="Arial, sans-serif" size="2">84, Hosur Road</font></div>
<div><font face="Arial, sans-serif" size="2">Bengaluru 560100, Indien</font></div>
<div><font face="Arial, sans-serif" size="2">Mobil: +91 9008132565</font></div>
<div><font face="Calibri, sans-serif"><a href="mailto:ashwini.vpatil@siemens.com"><font face="Arial, sans-serif" size="2" color="#0000FF"><u>mailto:ashwini.vpatil@siemens.com</u></font><font face="Arial, sans-serif" size="2" color="#808080"> </font></a></font></div>
<div><font face="Calibri, sans-serif"><a href="http://www.siemens.co.in/STS"><font face="Arial, sans-serif" size="2" color="#0000FF"><u>http://www.siemens.co.in/STS</u></font><font face="Arial, sans-serif" size="2" color="#808080"> </font></a></font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Arial, sans-serif" size="1">Registered Office: 130, Pandurang Budhkar Marg, Worli, Mumbai 400 018. Telephone +91 22 39677000. Fax +91 22 39677075. Other Offices: Bengaluru, Chennai, Gurgaon, Noida, Pune. Corporate Identity number:U99999MH1986PLC093854</font></div>
<div><font face="Calibri, sans-serif"> </font></div>
<div><font face="Calibri, sans-serif"> </font></div>
</font>
</body>
</html>