Thank you for your input.

I rebuilt with nothing but config fips; the test you requested fails
with this:

FIPS-mode test application

1. Non-Approved cryptographic operation test...
a. Included algorithm (D-H)...successful
6385:error:2A068065:FIPS routines:FIPS_selftest_aes:selftest
failed:fips_aes_selftest.c:92:
2. Automatic power-up self test...FAILED!

LE


Dr. Stephen Henson wrote:
> On Tue, Jul 17, 2007, Elia, Leonard F. wrote:
>
>
>> The Solaris version fails on test_sha. I thought perhaps this was a
>> problem with the SUN toolchain, so I rebuilt it using gcc 3.4.6 but it
>> still fails:
>>
>> make[1]: *** [test_sha] Error 1
>>
>> Items were built as:
>>
>> tar xvf openssl-fips-1.1.1.tar
>> cd openssl-fips-1.1.1
>> ./config fips --prefix=/usr/local/ssl-fips
>> make
>> make install
>>
>>
>
> That isn't the approved build procedure. You must do:
>
> ./config fips
>
> and *nothing* else otherwise it is a violation of the security policy.
>
> Though that isn't the cause of the problem. When you build from validated
> sources what does:
>
> test/fips_test_suite
>
> produce?
>
> Steve.
> --
> Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
> OpenSSL project core developer and freelance consultant.
> Funding needed! Details on homepage.
> Homepage: http://www.drh-consultancy.demon.co.uk
> __________________________________________________ ____________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List openssl-users@openssl.org
> Automated List Manager majordomo@openssl.org
>
>
__________________________________________________ ____________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majordomo@openssl.org