Return-Path: X-Original-To: apmail-httpd-users-archive@www.apache.org Delivered-To: apmail-httpd-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 12A649557 for ; Wed, 9 Jan 2013 17:00:39 +0000 (UTC) Received: (qmail 66890 invoked by uid 500); 9 Jan 2013 17:00:35 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 66850 invoked by uid 500); 9 Jan 2013 17:00:35 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 66842 invoked by uid 99); 9 Jan 2013 17:00:35 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 09 Jan 2013 17:00:35 +0000 X-ASF-Spam-Status: No, hits=0.8 required=5.0 tests=HTML_FONT_FACE_BAD,HTML_MESSAGE,RCVD_IN_DNSWL_MED,SPF_NEUTRAL,UNPARSEABLE_RELAY X-Spam-Check-By: apache.org Received-SPF: neutral (athena.apache.org: local policy) Received: from [216.82.255.50] (HELO mail1.bemta7.messagelabs.com) (216.82.255.50) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 09 Jan 2013 17:00:26 +0000 Received: from [216.82.253.227:54214] by server-10.bemta-7.messagelabs.com id 6B/88-21209-612ADE05; Wed, 09 Jan 2013 17:00:06 +0000 X-Env-Sender: jblasdel@csc.com X-Msg-Ref: server-16.tower-170.messagelabs.com!1357750805!24985421!1 X-Originating-IP: [20.137.2.87] X-StarScan-Received: X-StarScan-Version: 6.6.1.8; banners=-,-,- X-VirusChecked: Checked Received: (qmail 7382 invoked from network); 9 Jan 2013 17:00:05 -0000 Received: from amer-mta101.csc.com (HELO amer-mta101.csc.com) (20.137.2.87) by server-16.tower-170.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 9 Jan 2013 17:00:05 -0000 Received: from amer-gw09.amer.csc.com (amer-gw09.amer.csc.com [20.6.39.245]) by amer-mta101.csc.com (Switch-3.4.3/Switch-3.4.3) with ESMTP id r09H02YS024679 for ; Wed, 9 Jan 2013 12:00:03 -0500 To: users@httpd.apache.org MIME-Version: 1.0 X-KeepSent: 5DF881E1:08BA8478-86257AEE:005CE9A5; type=4; name=$KeepSent X-Mailer: Lotus Notes Release 8.5.2FP3 SHF97 September 16, 2011 From: Jerry Blasdel Message-ID: Date: Wed, 9 Jan 2013 11:00:08 -0600 X-MIMETrack: Serialize by Router on AMER-GW09/SRV/CSC(Release 8.5.2FP3 HF204|September 20, 2011) at 01/09/2013 11:55:04 AM, Serialize complete at 01/09/2013 11:55:04 AM Content-Type: multipart/alternative; boundary="=_alternative 005D628186257AEE_=" X-Virus-Checked: Checked by ClamAV on apache.org Subject: [users@httpd] Compiling Apache httpd 2.4 with FIPS capable OpenSSL on Solaris --=_alternative 005D628186257AEE_= Content-Type: text/plain; charset="US-ASCII" We are trying to get an Apache 2,4 HTTPD executable created from a Fips-capable OpenSSL on Solaris. After building and running the tests on fips-2 and OpenSSL 1.0.1c we build Apache and when we try to start it up we get the following in the error_log: [Wed Jan 09 16:21:30.066478 2013] [ssl:emerg] [pid 23726:tid 1] SSL Library Error: error:2D06B06F:FIPS routines:FIPS_check_incore_fingerprint:fingerprint does not match [Wed Jan 09 16:21:30.066487 2013] [ssl:emerg] [pid 23726:tid 1] AH02312: Fatal error initialising mod_ssl, exiting. Can anyone please provide me a place to start looking for a resolution? Thanks in advance --=_alternative 005D628186257AEE_= Content-Type: text/html; charset="US-ASCII" We are trying to get  an Apache 2,4 HTTPD executable created from a Fips-capable OpenSSL on Solaris.

After building and running the tests on fips-2  and OpenSSL 1.0.1c we build Apache and when we try to start it up we get the following in the error_log:

[Wed Jan 09 16:21:30.066478 2013] [ssl:emerg] [pid 23726:tid 1] SSL Library Error: error:2D06B06F:FIPS routines:FIPS_check_incore_fingerprint:fingerprint does not match
[Wed Jan 09 16:21:30.066487 2013] [ssl:emerg] [pid 23726:tid 1] AH02312: Fatal error initialising mod_ssl, exiting.

Can anyone please provide me a place to start looking for a resolution?

Thanks in advance

--=_alternative 005D628186257AEE_=--