[openssl-users] Enable the FIPS mode in the library level

[Alan Dean]

Thanks Matthias for your response.

I have a different question:

Per your suggestion in the previous email, FIPS_mode_set() can be moved
inside of OPENSSL_init(), in order to force the FIPS mode enabled in the
library level.

However currently OPENSSL_init() is actually invoked from within
FIPS_mode_set(). If we put FIPS_mode_set() inside OPENSSL_init, then it
makes OPENSSL_init to call itself recursively. In that case would it be ok
to just remove OPENSSL_init from within FIPS_mode_set?



On Mon, Mar 5, 2018 at 11:21 AM, Dr. Matthias St. Pierre <
Matthias.St.Pierre at ncp-e.com> wrote:

>
> Am 05.03.2018 um 19:55 schrieb Alan Dean:
> > Thanks a lot Matthias for the suggestion.
> >
> > I have few follow-up questions below:
> >
>
> Please see my other replies.
>
> --
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20180305/039d7b65/attachment.html>