[openssl-users] FIPS_mode_set(1) error:00000000:lib(0):func(0):reason(0)
Marcos Bontempo
marcosbontempo at hotmail.com
Sun Jan 3 15:49:26 UTC 2016
Thanks for the answer! The function ERR_get_error() is returning 0x00000000. Do you know what it means?I used the command you suggested:arm:~/nitere/new$ openssl errstr 0x00000000error:00000000:lib(0):func(0):reason(0)
> Date: Sun, 3 Jan 2016 10:27:15 -0500
> From: noloader at gmail.com
> To: openssl-users at openssl.org
> Subject: Re: [openssl-users] FIPS_mode_set(1) error:00000000:lib(0):func(0):reason(0)
>
> > It compiles without errors. When I try to enable FIPS mode, I get this
> > output:
> >
> > arm:~/nitere/new$ ./fipsctl set 1
> > *** Enabling FIPS module. ***
> > *** Failed to enable FIPS module. ***
> > error:00000000:lib(0):func(0):reason(0)
> >
> > But FIPS is still disabled:
> >
> > arm:~/nitere/new$ ./fipsctl get
> > *** FIPS module is disabled. ***
> >
> > Does somebody knows what is wrong?
>
> Just a guess, but it looks like ERR_get_error() is returning the
> result of loading the error strings.
>
> If FIPS_mode_set fails, then grab ERR_get_error() immediately and
> ouput it in hex. With the hex error code, you can:
>
> $ openssl errstr 0x060800A3
> error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips
>
> Jeff
> _______________________________________________
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160103/bf9f45d6/attachment-0001.html>
More information about the openssl-users
mailing list