We build OpenSSL in FIPS mode, to be used as a DLL. According to the OpenSSL FIPS module (https://www.openssl.org/docs/fips/UserGuide-1.2.pdf), we supply a parameter to the compiler --with-baseaddr=0xFB00000
. This parameter allows an integrity check of the libeay.dll
file when the DLL is loaded.
Where is this check being done? Can I see it in the OpenSSL code? is it auto-generated code at build time?
And generally, why doesn't it apply at 64bit?