httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jerry Blasdel <jblas...@csc.com>
Subject [users@httpd] Re: Compiling Apache httpd 2.4 with FIPS capable OpenSSL on Solaris
Date Thu, 10 Jan 2013 21:05:03 GMT
My issue has been resolved.  In my case I was statically linking the 
OpenSSL so I needed to do the following before calling httpd configure:

export CC=fipsld
export FIPSLD_CC=gcc



This is a PRIVATE message. If you are not the intended recipient, please 
delete without copying and kindly advise us by e-mail of the mistake in 
delivery. 
NOTE: Regardless of content, this e-mail shall not operate to bind CSC to 
any order or other contract unless pursuant to explicit written agreement 
or government initiative expressly permitting the use of e-mail for such 
purpose.



From:   Jerry Blasdel/USA/CSC
To:     users@httpd.apache.org
Date:   01/09/2013 11:00 AM
Subject:        Compiling Apache httpd 2.4 with FIPS capable OpenSSL on 
Solaris


We are trying to get  an Apache 2,4 HTTPD executable created from a 
Fips-capable OpenSSL on Solaris.

After building and running the tests on fips-2  and OpenSSL 1.0.1c we 
build Apache and when we try to start it up we get the following in the 
error_log:

[Wed Jan 09 16:21:30.066478 2013] [ssl:emerg] [pid 23726:tid 1] SSL 
Library Error: error:2D06B06F:FIPS 
routines:FIPS_check_incore_fingerprint:fingerprint does not match
[Wed Jan 09 16:21:30.066487 2013] [ssl:emerg] [pid 23726:tid 1] AH02312: 
Fatal error initialising mod_ssl, exiting.

Can anyone please provide me a place to start looking for a resolution?

Thanks in advance



Mime
View raw message