views:

223

answers:

1

Hi Could any one know apache server is not starting in fips mode in some PCs.

Description:

We have a client-server application where Apache webserver is the server and IE is the browser. Recently we have made this Apache webserver FIPS 140-2 compliant. Hence now it can work in FIPS mode. We are able to run the server in FIPS mode on all the systems except on one where We are facing an issue while starting Apache service from services.msc. It stops with the following error message.

1) Could not start Apache service on Local Computer Error 1053: The service did not respond to the start or control request in a timely fashion.

2) The event log shows the following information for the crash: Faulting Application Apacheserver.exe, version 1.0.0.1, faulting module libeay32.dll, version 0.9.8.10, fault address 0x00002e14

What I have tried:

Windows Debugging Tool (Windbg.exe) shows that the crash is occuring at a function named CRYPTO_set_ex_data_implementation(), which is in the OpenSSL code. I am not able to figure out the cause for the crash at this point.

The system has the following configuration

Processor : Pentium D OS : Windows XP Service Pack : SP3 Internet Explorer 6.0

Does the service need any additional configuration changes to run the server in FIPS mode? Note: Libeay32.dll is an OpenSSL dll enabling the server to run in FIPS mode. The server in non-FIPS mode works fine with the same dlls.

Thanks & Regards, Haranadh

A: 

what did you have to do to enable fips support on apache? did you have to build apache against the proper openssl version?

Joe Wilson