<div dir="ltr">Hi All,<div><br></div><div>In addition to the my previous mail, this is additional info</div><div><br></div><div><div>objdump -t libcrypto.so.1.0.0 | grep FIPS_signature</div><div>001ad8b0 l O .data 00000014 FIPS_signature</div><div><br></div><div>readelf -a libcrypto.so.1.0.0 | grep FIPS_signature</div><div>11812: 001ad8b0 20 OBJECT LOCAL DEFAULT 23 FIPS_signature</div><div><br></div></div><div><br></div><div>Regards</div><div>Jayalakshmi</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, May 3, 2018 at 7:39 PM, Jayalakshmi bhat <span dir="ltr"><<a href="mailto:bhat.jayalakshmi@gmail.com" target="_blank">bhat.jayalakshmi@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi All,<br></div><div><br></div><div>I am building FIPS supported OpenSSL in yocto for ARM architecture. I tried using openssl-fips-2.0.13 and openssl-fips-2.0.4</div><div><br></div><div><br></div><div>I am building FIPS externally with the below environmental settings</div><div>------------------------
<span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">------------------------</span>
<span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">------------------------</span>
<span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">------------------------</span>
<span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">------------------------</span>
</div><div>PATH=/yocto/gcc/gcc-linaro-4.<wbr>9-2016.02-x86_64_arm-linux-<wbr>gnueabihf/bin:$PATH</div><div><br></div><div>export PATH</div><div>export FIPS_SIG=/yocto/openssl-fips-<wbr>2.0.4/util/incore</div><div>export MACHINE=armv71</div><div>export RELEASE=4.9.13</div><div>export SYSTEM=Linux</div><div>export ARCH=arm</div><div>export CROSS_COMPILE=arm-linux-<wbr>gnueabihf-</div><div>export HOSTCC=gcc</div><div>export FIPSDIR=/yocto/meta/recipes-<wbr>connectivity/openssl/fips2.0</div><div><br></div><div>Build commands for FIPS library </div><div><br></div><div>./config -mfloat-abi=hard</div><div>make</div><div>make install</div><div>------------------------</div><div><br></div><div>Then I am building OpenSSL 1.0.2h with the below environment settings<br></div><div><br></div><div>export FIPSDIR="/yocto/meta/recipes-<wbr>connectivity/openssl/fips2.0"</div><div>export FIPSLIBDIR="/yocto/meta/<wbr>recipes-connectivity/openssl/<wbr>fips2.0/lib/"</div><div>export FIPS_SIG="/yocto/meta/recipes-<wbr>connectivity/openssl/fips2.0/<wbr>bin/incore"</div><div><br></div><div>Build command to build OpenSSL.</div><div><br></div><div>perl ./Configure ${EXTRA_OECONF} fips shared --with-fipsdir=${FIPSDIR} --prefix=$useprefix --openssldir=${libdir}/ssl --libdir=`basename ${libdir}` $target</div><div><br></div><div>Build is successful. without any error. But when I try executing </div><div><br></div><div>export OPENSSL_FIPS=1</div><div>openssl -v</div><div><br></div><div>I am getting </div><div><br></div><div>3069334736:error:2D06B06F:FIPS routines:FIPS_check_incore_<wbr>fingerprint:fingerprint does not match:fips.c:244</div><div><br></div><div>I am not understand what could be going wrong. Any help is appreciated </div><div><br></div><div>Regards</div><span class="HOEnZb"><font color="#888888"><div>Jayalakshmi</div><div><br></div><div> </div><div><span style="white-space:pre-wrap"> </span> </div></font></span></div>
</blockquote></div><br></div>