Description of problem: OpenSSL self-test fails in FIPS mode on RHEL 5.6.z in elliptic curves tests as follows: test elliptic curves ../util/shlib_wrap.sh ./ectest Elliptic curves are disabled. test ecdsa ../util/shlib_wrap.sh ./ecdsatest Elliptic curves are disabled. test ecdh ../util/shlib_wrap.sh ./ecdhtest No ECDH support cat base64 aes-128-cbc 23960:error:06080090:digital envelope routines:EVP_DigestInit_ex:disabled for fips:digest.c:292: 23972:error:06080090:digital envelope routines:EVP_DigestInit_ex:disabled for fips:digest.c:292: ./p ./p.aes-128-cbc.clear differ: char 10, line 2 make[1]: *** [test_enc] Error 1 make[1]: Leaving directory `/usr/src/redhat/BUILD/openssl-fips-0.9.8e/test' error: Bad exit status from /var/tmp/rpm-tmp.80975 (%build) Version-Release number of selected component (if applicable): openssl-0.9.8e-12.el5_6.10 How reproducible: 100% Steps to Reproduce: 1. execute 'make check' in built source rpm Actual results: See above. Expected results: PASS Additional info: N/A
I don't think this makes sense to work on on the RHEL-5. Besides the make check was never designed for this and it will not be upstreamable change.
This request was evaluated by Red Hat Product Management for inclusion in the current release of Red Hat Enterprise Linux. Because the affected component is not scheduled to be updated in the current release, Red Hat is unable to address this request at this time. Red Hat invites you to ask your support representative to propose this request, if appropriate, in the next release of Red Hat Enterprise Linux.