[openssl-users] FIPS mode errors

[cloud force]

Hi Jacob,

Any suggestions regarding how to fix the following errors:

140073969415840:error:2D06B06F:FIPS
routines:FIPS_check_incore_fingerprint:fingerprint
does not match:fips.c:232:

(I built the FIPS module and the OpenSSL library on Ubuntu linux)

Thanks,
Rich


On Thu, Feb 11, 2016 at 11:52 PM, cloud force <cloud.force858 at gmail.com>
wrote:

> Hi Jakob,
>
> This is the most severe FIPS error code, it means one of
>> 3 things:
>>
>> 1. (official reason for this error code): Someone illegally
>>   modified the FIPS validated crypto code after it was
>>   compiled, do not use this computer until the cause has
>>   been thoroughly investigated and corrected.
>>
>> 2. (much more likely): The file containing the FIPS code
>>   (either lib/libcrypto.so.1.0.0 or the program you ran)
>>   was relocated to a different memory address this time
>>   than back when you ran fipsld to set the checksum
>>   (fingerprint).
>>
>
> If this is the case, how should I fix this problem?
>
>
>>
>>
>> 3. (sometimes): You forgot to run fipsld to set the
>>   checksum (fingerprint).
>>
>
> At what point during the build should the fipsld be run?
>
>>
>>
>>
>>
>> Enjoy
>>
>> Jakob
>> --
>> Jakob Bohm, CIO, Partner, WiseMo A/S.  https://www.wisemo.com
>> Transformervej 29, 2860 Søborg, Denmark.  Direct +45 31 13 16 10
>> This public discussion message is non-binding and may contain errors.
>> WiseMo - Remote Service Management for PCs, Phones and Embedded
>>
>>
>> --
>> openssl-users mailing list
>> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>>
>>
>
>
> --
> Thanks,
> Rich
>
>


-- 
Thanks,
Rich
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160222/88c9b7e4/attachment.html>