|Thank you for looking at this

|

|=3D=3D=3D=3D=3D=3D=3D=3D=3D Encrypting on Windows
C:\test>\ssl\bin\openssl enc -aes128 -in test.odt -out test98.odt.aes
(OpenSSL 0.9.8e 23 Feb 2007)
|

| C:\test>\ssl\bin\openssl enc -aes128 -in test.odt -out test97.odt.aes
(OpenSSL 0.9.7m-fips 23 Feb 2007)|

|Cross-decryption on Windows yielded the following SHA1s:
C:\test>sha1sum test*
db9c6848e59fd6ec8039544ec3383df2c262b0e4 test.odt
db9c6848e59fd6ec8039544ec3383df2c262b0e4 test97
db9c6848e59fd6ec8039544ec3383df2c262b0e4 test98|

|So all works nicely there. On Solaris it is a different thing:
|

|decrypting test98.odt.aes using (OpenSSL 0.9.7m-fips 23 Feb 2007) on=20
Solaris 10:
/ssl/bin/openssl enc -aes128 -d -in test98.odt.aes -out test98
enter aes-128-cbc decryption password:
bad decrypt
27772:error:06065064:digital envelope routines:EVP_DecryptFinal:bad=20
decrypt:evp_enc.c:509:|

|decrypting test97.odt.aes using (OpenSSL 0.9.7m-fips 23 Feb 2007) on=20
Solaris 10:
/ssl/bin/openssl enc -aes128 -d -in test97.odt.aes -out test97
enter aes-128-cbc decryption password:
bad decrypt
28108:error:06065064:digital envelope routines:EVP_DecryptFinal:bad=20
decrypt:evp_enc.c:509:|

|=3D=3D=3D=3D=3D=3D=3D=3D=3D Encrypting on Solaris|

| [nasa ~]$ /usr/local/ssl/bin/openssl dgst -sha1 test.odt
SHA1(test.odt)=3D db9c6848e59fd6ec8039544ec3383df2c262b0e4|

|[nasa ~]$ /usr/local/ssl/bin/openssl enc -aes128 -in test.odt -out=20
test98s.odt.aes
enter aes-128-cbc encryption password:
Verifying - enter aes-128-cbc encryption password:
|

|The SHA1 matches. Let=92s try to decrypt on Windows:
|

|0.9.8e:
C:\test>\openssl\bin\openssl enc -aes128 -d -in test98s.odt.aes -out test=
98s
enter aes-128-cbc decryption password:
bad decrypt
3908:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad=20
decrypt:.\
crypto\evp\evp_enc.c:461:|

|0.9.7m:
C:\test>\ssl\bin\openssl enc -aes128 -d -in test98s.odt.aes -out test98s_
enter aes-128-cbc decryption password:
bad decrypt
828:error:06065064:digital envelope routines:EVP_DecryptFinal:bad=20
decrypt:evp_enc.c:509:|

|Leonard Elia
NASA LaRC
|

|
|

|
|
Thomas J. Hruska wrote:
> Elia, Leonard F. wrote:
>> Hello All,
>> I built OpenSSL with the FIPS module, and after a few issues built it=20
>> successfully on Solaris 10 (using Sun cc) and on Windows using MinGW.
>> Each works fine on its own platform, but if I encrypt on Solaris 10,=20
>> I get decryption errors on Windows, and vice versa.
>>
>> Any ideas?
>>
>> Leonard Elia
>> NASA LaRC

>
> Cool. NASA uses OpenSSL.
>
> Got some command-lines/source code/error messages we can use to=20
> duplicate?
>

__________________________________________________ ____________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majordomo@openssl.org