FIPS_mod_set() fails with reason 111 (Do_Dsa_Sign())
deepak.redmi2 at gmail.com
Fri Aug 2 17:05:47 UTC 2019
Can anyone help me with following?
1) Calling FIPS_mode_set() from inside a DLL just after SSL_library_init()
2) This DLL links to
a] static libraries (libeay, libssl, libcompat)from FIPS capable OpenSSL.
b] static libcurl which is again prepared using above static FIPS capable
c] Includes fips_premain.c and preprocessor directive of HMACSHA=checksum
3)This is done in order to achieve FIPS compliance for a windows service
which loads above DLL for all its communications.
4) What am I missing?
5) Do I need to rebase the DLL to an address as per fipslink.pl? If yes,
what would be input linker parameters to fipslink.pl?
Appreciate your input on this.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the openssl-users