[openssl-users] Does OpenSSL FIPS modules only affect libcrypto.so

security veteran security.veteran at gmail.com
Tue Jan 19 19:02:33 UTC 2016


Thanks Steve.

When the environment variable OPENSSL_FIPS is set, does it enable FIPS mode
globally, so that any applications which use OpenSSL also enter FIPS mode?

On Tue, Jan 19, 2016 at 10:52 AM, Dr. Stephen Henson <steve at openssl.org>
wrote:

> On Tue, Jan 19, 2016, security veteran wrote:
>
> >
> > openssl dgst -md5 FILE_NAME
> >
> > To me it looks like the openssl commands are always run with FIPS enabled
> > in this case. Is that the expected behavior?
> >
>
> Ihe openssl command enters FIPS mode if the environmant variable
> OPENSSL_FIPS
> is set.
>
> Steve.
> --
> Dr Stephen N. Henson. OpenSSL project core developer.
> Commercial tech support now available see: http://www.openssl.org
> _______________________________________________
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160119/21eb381b/attachment.html>


More information about the openssl-users mailing list