<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=windows-1252">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix"><tt>On 12/02/2016 03:45, cloud force
wrote:</tt><tt><br>
</tt></div>
<blockquote class=" cite"
id="mid_CAEsYawyiKudDTQSxD5ouFLojei_dR_QtbDzM_wcYvSrjw6WYDA_mail_gmail_com"
cite="mid:CAEsYawyiKudDTQSxD5ouFLojei_dR_QtbDzM_wcYvSrjw6WYDA@mail.gmail.com"
type="cite">
<meta http-equiv="Context-Type" content="text/html; charset=UTF-8">
<div dir="ltr"><tt>Hi,</tt>
<div><tt><br>
</tt></div>
<div><tt>I built the FIPS capable OpenSSL library on Ubuntu
12.04. </tt></div>
<div><tt>When I run the command "OPENSSL_FIPS=1 openssl
ciphers", I saw the following error:</tt></div>
<div><tt><br>
</tt></div>
<div><tt><span>140073969415840:erro</span></tt><tt><span>r:2D06B06F:FIPS
routines:FIPS_check_</span></tt><tt><span>incore_fingerprint:f</span></tt><tt><span>ingerprint
does not match:fips.c:232:</span></tt><tt><br>
</tt></div>
<div><tt><span><br>
</span></tt></div>
<div><tt>I tried few other openssl commands under the FIPS mode
and got all the same error messages. The non-FIPS mode was
working fine.</tt></div>
<div><tt><br>
</tt></div>
<div><tt>What is the above error mean and what could have
caused this error?</tt></div>
</div>
</blockquote>
<tt>This is the most severe FIPS error code, it means one of <br>
3 things:</tt><tt><br>
</tt><tt><br>
</tt><tt>1. (official reason for this error code): Someone illegally
<br>
modified the FIPS validated crypto code after it was <br>
compiled, do not use this computer until the cause has <br>
been thoroughly investigated and corrected.</tt><tt><br>
</tt><tt><br>
</tt><tt>2. (much more likely): The file containing the FIPS code <br>
(either lib/libcrypto.so.1.0.0 or the program you ran) <br>
was relocated to a different memory address this time <br>
than back when you ran fipsld to set the checksum <br>
(fingerprint).</tt><tt><br>
</tt><tt><br>
</tt><tt>3. (sometimes): You forgot to run fipsld to set the <br>
checksum (fingerprint).</tt><tt><br>
</tt><tt><br>
</tt><tt><br>
</tt><tt><br>
</tt>
<pre class="moz-signature" cols="72">Enjoy
Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S. <a class="moz-txt-link-freetext" href="https://www.wisemo.com">https://www.wisemo.com</a>
Transformervej 29, 2860 Søborg, Denmark. Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded </pre>
</body>
</html>