[openssl-users] Helps needed regarding the error "fingerprint does not match:fips.c:232:"

[cloud force]

Actually it looks like when I ran the tests using the OpenSSL FIPS library
which I built using Ubuntu build script, the content of FIPS_SIGNATURE
seemed to be empty.

Can anyone tell me how was the value of sig and FIPS_SIGNATURE (near fips.c
line 222) was computed and assigned?

Thanks.

On Wed, Feb 24, 2016 at 5:59 PM, cloud force <cloud.force858 at gmail.com>
wrote:

> I built the FIPS capable OpenSSL in the standard way (i.e. ./config fips; make;
> make install) and it worked.
>
> After some tracing on the source code of fips.c I found that the mismatch
> error was due to the fact that the content of the two variables "sig" and
> "FIPS_SIGNATURE" are different when the OpenSSL lib was built using the
> Ubuntu build script. When building the lib using the standard way, the
> content of "sig" and "FIPS_SIGNATURE" are the same.
>
> Does anyone know what could cause the content of "sig" and
> "FIPS_SIGNATURE"  to be different (and hence causes the "fingerprint does
> not match" error)?
>
> Thanks and any suggestions are truly appreciated.
>
>
>
> On Tue, Feb 23, 2016 at 5:01 PM, Dr. Stephen Henson <steve at openssl.org>
> wrote:
>
>> On Tue, Feb 23, 2016, cloud force wrote:
>>
>> > Hi All:
>> >
>> > I built the FIPS modules on Ubuntu platform and was trying to build the
>> > FIPS capable OpenSSL library.
>> >
>> > The build went fine but when I ran the following test, the fingerprint
>> > error showed up:
>> >
>> > *OPENSSL_FIPS=1 openssl md5*
>> >
>>
>> I suggest you first try building the FIPS capable OpenSSL in the standard
>> way
>> i.e.
>>
>> ./config fips
>> make
>>
>> and see if you get the same problem.
>>
>> Steve.
>> --
>> Dr Stephen N. Henson. OpenSSL project core developer.
>> Commercial tech support now available see: http://www.openssl.org
>> --
>> openssl-users mailing list
>> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>>
>
>
>
> --
> Thanks,
> Rich
>
>


-- 
Thanks,
Rich
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160224/212069d6/attachment.html>