FIPS mode with OpenSSL

[David Kjendle]

We have been trying to get OpenSSL 1.0.1H with FIPS capability to work with our application. We originally used all defaults to build both the FIPS and OpenSSL but ran into issues with dll conflicts. We have tried several base address but because we have no idea what people are loading on their computers can't reliably select a base address.

One option we have tried is to remove the \fixed from the makefile:

$(FIPSLINK) $(MLFLAGS) /fixed /map /base:$(BASEADDR) /out:$(O_CRYPTO) /def:ms/LIBEAY32.def @<<

Can we be FIPS compliant without the "fixed"? Will it fail in FIPS mode?

Thanks,

Dave