[openssl-users] Help needed on FIPS error 0409A09E:lib(4):func(154):reason(158)

[Dr. Stephen Henson]

On Thu, Jul 16, 2015, Jayalakshmi bhat wrote:

> Hi All,
> 
> I am using OpenSSL library for a SSL client performing mutual
> authentication. RSA certificate used is signed with SHA512 digest. When I
> switch to FIPS mode and perform re-authentication, I am hitting an
> error :0409A09E:lib(4):func(154):reason(158). Cipher used is AES128-SHA.
> 
> Can any one tell me what could be the possible issue?
> 

A bit more information would be helpful. When you say "SSL client" do you mean
using SSL v3.0 or TLS? SSL 3.0 isn't allowed in FIPS mode but I'd expect a
different error.

Which version of OpenSSL are you using? Can you reproduce the error using
s_client?

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org