Return-Path: X-Original-To: apmail-tomcat-users-archive@www.apache.org Delivered-To: apmail-tomcat-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 1F7FB1885C for ; Thu, 3 Dec 2015 19:10:11 +0000 (UTC) Received: (qmail 88757 invoked by uid 500); 3 Dec 2015 19:09:44 -0000 Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org Received: (qmail 88686 invoked by uid 500); 3 Dec 2015 19:09:44 -0000 Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Tomcat Users List" Delivered-To: mailing list users@tomcat.apache.org Received: (qmail 88675 invoked by uid 99); 3 Dec 2015 19:09:44 -0000 Received: from Unknown (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 03 Dec 2015 19:09:44 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 00F94180B2D for ; Thu, 3 Dec 2015 19:09:44 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 3.148 X-Spam-Level: *** X-Spam-Status: No, score=3.148 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, HTML_MESSAGE=3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd3-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-eu-west.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id rFYLEfqFKNDU for ; Thu, 3 Dec 2015 19:09:43 +0000 (UTC) Received: from mail-io0-f169.google.com (mail-io0-f169.google.com [209.85.223.169]) by mx1-eu-west.apache.org (ASF Mail Server at mx1-eu-west.apache.org) with ESMTPS id 69FB124E19 for ; Thu, 3 Dec 2015 19:09:42 +0000 (UTC) Received: by ioir85 with SMTP id r85so91717077ioi.1 for ; Thu, 03 Dec 2015 11:09:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=E9N4YVubjTR2NFNC0+PDjH7wsGwMc5TZGF7GZMWoQdg=; b=LY6+auoB8mhS0LkgpvhMHVkWrYiFCbwZgtLkk096zgRfaeZU53gODqEg9eiz729kY4 pvNXIb9yWg+7cfgF0V1RE1huSI2pXn/9fvZdCNWYkM5mUskRG7cJBxFp0nrHBibr5zfR PzG2cQcHpLbf32oRmLN90yXQY06BTJln1KMjbz6BVxSGlNjSwFE21xDo+T79W1E13EmS ppBX5Zgic2ptQK4QPTKgiaDSa4065xNTasp7gn+vm6ccUWHQMuS+s2fIvt1JZNS4Iol1 EItkzc2RzDerOa4nMn5FnN1Q9euSEnNO94RTkPSvghgDQZUB0JVqheiykMqok27CVeSi OrKw== MIME-Version: 1.0 X-Received: by 10.107.168.157 with SMTP id e29mr10121571ioj.96.1449169781135; Thu, 03 Dec 2015 11:09:41 -0800 (PST) Received: by 10.36.215.3 with HTTP; Thu, 3 Dec 2015 11:09:41 -0800 (PST) Date: Fri, 4 Dec 2015 00:39:41 +0530 Message-ID: Subject: Tomcat FIPS with FIPS capable OpenSSL From: Nithesh Kb To: users@tomcat.apache.org Content-Type: multipart/alternative; boundary=001a11427be00641d705260322fc --001a11427be00641d705260322fc Content-Type: text/plain; charset=UTF-8 HI Tomcat Experts, I'm trying to enable fips mode in tomcat but i get these exception, *04-Dec-2015 00:00:34.787 INFO [main] org.apache.catalina.core.AprLifecycleListener.initializeSSL Initializing FIPS mode...* *04-Dec-2015 00:00:34.791 SEVERE [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent Failed to initialize the SSLEngine.* * java.lang.Exception: error:2D06C06E:FIPS routines:FIPS_mode_set:fingerprint does not match* * at org.apache.tomcat.jni.SSL.fipsModeSet(Native Method)* *Steps that i have followed,* *1. Built FIPS Capable Openssl* Thanks, Nithesh --001a11427be00641d705260322fc--