[openssl-dev] [openssl.org #3958] [PATCH] pkcs12 application selects bad defaults in FIPS mode

David Weidenkopf via RT rt at openssl.org
Mon Jul 27 21:15:39 UTC 2015


openssl 1.0.1l

It seems that the default algorithm selection for pkcs12 is incorrect when
FIPS mode is in use. The root cause appears to be that the FIPS_mode()
check is performed prior to the load_config() call. A patch is attached
that changes this ordering.

Feedback on this issue would be much appreciated.

Thanks

-------------- next part --------------
A non-text attachment was scrubbed...
Name: pkcs12_FIPS_check.patch
Type: text/x-patch
Size: 829 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20150727/b5cf4b21/attachment.bin>
-------------- next part --------------
_______________________________________________
openssl-bugs-mod mailing list
openssl-bugs-mod at openssl.org
https://mta.openssl.org/mailman/listinfo/openssl-bugs-mod


More information about the openssl-dev mailing list