[openssl-users] FIPS_check_incore_fingerprint: fingerprint does not match

[Jakob Bohm]

On 23/12/2015 01:26, Marcos Bontempo wrote:
> Hello,
>
> I'm getting this error when call the function FIPS_mode_set(1):
>
> error:2D06B06F:FIPS routines:FIPS_check_incore_fingerprint:fingerprint 
> does not match
>
> Does anybody know how to correct it?
>

You forgot to run the special "FIPS" linker script on your
application, which sets the value of that fingerprint based
on the load address and relocations of your application.

Note, that this means that the design of the FIPS module
security policy is incompatible with ASLR on almost every
operating system having that feature.

Enjoy

Jakob
-- 
Jakob Bohm, CIO, Partner, WiseMo A/S.  https://www.wisemo.com
Transformervej 29, 2860 Søborg, Denmark.  Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20151223/27d91246/attachment-0001.html>