FIPS_mod_set() fails with reason 111 (Do_Dsa_Sign())

Dipak B deepak.redmi2 at
Fri Aug 2 17:05:47 UTC 2019


Can anyone help me with following?

1) Calling FIPS_mode_set() from inside a DLL just after SSL_library_init()
fails with

2) This DLL links to
a] static libraries (libeay, libssl, libcompat)from FIPS capable OpenSSL.

b] static libcurl which is again prepared using above static FIPS capable

c] Includes fips_premain.c and preprocessor directive of HMACSHA=checksum
of itself

3)This is done in order to achieve FIPS compliance for a windows service
which loads above DLL for all its communications.

4) What am I missing?

5) Do I need to rebase the DLL to an address as per If yes,
what would be input linker parameters to

Appreciate your input on this.

Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the openssl-users mailing list