[openssl-users] Regarding FIPS capable openssl (I want to combine libcrypto.a and libssl.a)

Jakob Bohm jb-openssl at wisemo.com
Fri Jun 24 06:27:27 UTC 2016

On 24/06/2016 07:59, Sahil Gandhi wrote:
> Hi All,
> I have built Openssl-fips-2.0.10.tar on* RHEL Linux* (/_*Same happens 
> with Solaris 10*_/). Then I built Openssl-1.0.1p using respective fips 
> object module (i.e. Openssl-fips-2.0.10.tar).
> Once I have built Openssl-1.0.1p, libcrypto.a and libssl.a has been 
> created.
> I need to join these 2 libraries and make it one.
> I am doing it using "ar" command as follows:
> ar -x libssl.a
> ar -x libcrypto.a
> Then combine all .o files to make third library:
> ar -r libnew.a *.o
> But when i use this libnew.a in my sample(contain FIPS_mode_set(1)), 
> it compiles successfully but when execute the executable it throws 
> error* finger print does not match:fips.c:232*
>  Plz help.
>  I need to combine both libaries and make it one.
> Any help/suggestion?

You forgot the special link step for FIPS enabled applications,
perhaps also some of the other required steps from the FIPS
module users guide.


Jakob Bohm, CIO, Partner, WiseMo A/S.  https://www.wisemo.com
Transformervej 29, 2860 Søborg, Denmark.  Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded

More information about the openssl-users mailing list