[openssl-users] Building an application with OpenSSL and FIPS support.
MHeimlich at Steelcloud.com
Mon Oct 10 14:11:53 UTC 2016
My FIPS module version is openssl-fips-2.0.13
$OPENSSL_FIPS=1 openssl md5 /dev/null
Error setting digest md5
140066569107136:error:060A80A3:digital envelope routines:FIPS_DIGESTINIT:disabled for fips:fips_md.c:180:
$OPENSSL_FIPS=1 openssl sha1 /dev/null
Do that appears to be working correctly.
From: openssl-users <openssl-users-bounces at openssl.org> on behalf of Dr. Stephen Henson <steve at openssl.org>
Sent: Monday, October 10, 2016 8:44 AM
To: openssl-users at openssl.org
Subject: Re: [openssl-users] Building an application with OpenSSL and FIPS support.
On Fri, Oct 07, 2016, Matthew Heimlich wrote:
> Which returns
> Attempting to set FIPS mode to 1...
> Last error was: 2d06b06f
> FIPS_mode_set failed: 2d06b06f
> FIPS mode is: 0???
> So it would appear that my FIPS mode is never even being set, and walking through the code would seem to confirm this. In addition, the error code doesn't seem to be present in the FIPS documentation, but errstr informs me that it is
> error:2D06B06F:FIPS routines:DSA_BUILTIN_PARAMGEN2:fingerprint does not match nonpic relocated???
> Any tips on where to go from here?
Which versions of the FIPS module and OpenSSL are you using?
In the FIPS capable OpenSSL try this:
OPENSSL_FIPS=1 openssl md5 /dev/null
OPENSSL_FIPS=1 openssl sha1 /dev/null
Please give details of any errors you get.
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
More information about the openssl-users