[openssl-users] FIPS_check_incore_fingerprint: fingerprint does not match

[Marcos Bontempo]

Thanks for the answer! I searched about the FIPS linker script but I couldn't find any content. Can you tell how can I run it?

To: openssl-users at openssl.org
From: jb-openssl at wisemo.com
Date: Wed, 23 Dec 2015 02:58:22 +0100
Subject: Re: [openssl-users] FIPS_check_incore_fingerprint: fingerprint does not match


  

    
  
  
    On 23/12/2015 01:26, Marcos Bontempo
      wrote:

    
    
      
      Hello,
        

        
        I'm getting this error when call the function
          FIPS_mode_set(1):
        

        
        error:2D06B06F:FIPS
          routines:FIPS_check_incore_fingerprint:fingerprint does not
          match
        

        
        Does anybody know how to correct it?
        

        
      
    
    

    You forgot to run the special "FIPS" linker script on your 

      application, which sets the value of that fingerprint based 

      on the load address and relocations of your application.

      

      Note, that this means that the design of the FIPS module 

      security policy is incompatible with ASLR on almost every 

      operating system having that feature.

      

    
    Enjoy

Jakob
-- 
Jakob Bohm, CIO, Partner, WiseMo A/S.  https://www.wisemo.com
Transformervej 29, 2860 Søborg, Denmark.  Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded 
  


_______________________________________________
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20151223/7332fe93/attachment.html>