<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="GENERATOR" content="MSHTML 11.00.10586.212">
<style id="owaParaStyle">P {
MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px
}
</style>
</head>
<body fPStyle="1" ocsi="0">
<font size="2" face="Arial">Thanks Steve,<br>
<br>
My question here is do I need to put openssl in FIPS mode for my application, even when Kernel is in FIPS mode. I get FIPS_mode() returning true when I initialize openssl from my application.<br>
<br>
Regards<br>
Darshan<br>
</font><br>
________________________________________<br>
From: openssl-dev [openssl-dev-bounces@openssl.org] on behalf of Steve Marquess [marquess@openssl.com]<br>
Sent: Friday, May 27, 2016 2:58 PM<br>
To: openssl-dev@openssl.org<br>
Subject: Re: [openssl-dev] FIPs mode and openssl<br>
<br>
On 05/27/2016 05:11 AM, Mody, Darshan (Darshan) wrote:<br>
> Hi,<br>
><br>
><br>
><br>
> I have a query with regards to FIPS mode and use of Openssl. I have put<br>
> my kernel image n FIPs mode using the documentation<br>
> (https://urldefense.proofpoint.com/v2/url?u=https-3A__access.redhat.com_documentation_en-2DUS_Red-5FHat-5FEnterprise-5FLinux_6_html_Security-5FGuide_sect-2DSecurity-5FGuide-2DFederal-5FStandards-5FAnd-5FRegulations-2DFederal-5FInformation-5FProcessing-5FStandard.html&d=CwICAg&c=BFpWQw8bsuKpl1SgiZH64Q&r=bsEULbVnjelD7InzgsegHBEbtXzaIDagy9EuEhJrKfQ&m=GTOvXwENarIDt6ceeifX3cwsUHwEPSoA5Nst5bYguXc&s=-Gf_V2cek9XebA8eKWhFeL2hXCtHLqwJauOD0IuopLU&e=
)<br>
><br>
><br>
><br>
> Do I need to put the openssl in FIPs mode using the API FIPS_mode_set(1)<br>
> or will by default the openssl will put itself in FIPS mode for my<br>
> application. There are couple of application on the server we use<br>
> openssl. Do I need to put each of the application openssl in FIPS mode<br>
> or will it put itself in FIPS since the kernel is in FIPS mode.<br>
><br>
><br>
><br>
> Thanks<br>
><br>
> Darshan<br>
><br>
><br>
><br>
<br>
<br>
You are using the Red Hat FIPS module, not the OpenSSL one, so you'll<br>
need to ask that vendor.<br>
<br>
-Steve M.<br>
<br>
--<br>
Steve Marquess<br>
OpenSSL Validation Services, Inc.<br>
1829 Mount Ephraim Road<br>
Adamstown, MD 21710<br>
USA<br>
+1 877 673 6775 s/b<br>
+1 301 874 2571 direct<br>
marquess@openssl.com<br>
gpg/pgp key: https://urldefense.proofpoint.com/v2/url?u=http-3A__openssl.com_docs_0x6D1892F5.asc&d=CwICAg&c=BFpWQw8bsuKpl1SgiZH64Q&r=bsEULbVnjelD7InzgsegHBEbtXzaIDagy9EuEhJrKfQ&m=GTOvXwENarIDt6ceeifX3cwsUHwEPSoA5Nst5bYguXc&s=pvfmLNV5wFtbE8TvbGtpQdBRmzZzuuCQF0UgxmaZW34&e=<br>
--<br>
openssl-dev mailing list<br>
To unsubscribe: https://urldefense.proofpoint.com/v2/url?u=https-3A__mta.openssl.org_mailman_listinfo_openssl-2Ddev&d=CwICAg&c=BFpWQw8bsuKpl1SgiZH64Q&r=bsEULbVnjelD7InzgsegHBEbtXzaIDagy9EuEhJrKfQ&m=GTOvXwENarIDt6ceeifX3cwsUHwEPSoA5Nst5bYguXc&s=XQfgkJcZEf0I-0-rMIEw2wp4U7mgrCk8EPGFlSM461U&e=
</body>
</html>