FIPS_mod_set() fails with reason 111 (Do_Dsa_Sign())

Dipak B deepak.redmi2 at gmail.com
Fri Aug 2 17:05:47 UTC 2019


Hi,

Can anyone help me with following?

1) Calling FIPS_mode_set() from inside a DLL just after SSL_library_init()
fails with
[error:2D06B06F:lib(45):func(107):reason(111)]

2) This DLL links to
a] static libraries (libeay, libssl, libcompat)from FIPS capable OpenSSL.

b] static libcurl which is again prepared using above static FIPS capable
OpenSSL

c] Includes fips_premain.c and preprocessor directive of HMACSHA=checksum
of itself

3)This is done in order to achieve FIPS compliance for a windows service
which loads above DLL for all its communications.

4) What am I missing?

5) Do I need to rebase the DLL to an address as per fipslink.pl? If yes,
what would be input linker parameters to fipslink.pl?

Appreciate your input on this.

Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20190802/6785dc1d/attachment.html>


More information about the openssl-users mailing list