> Following the Windows build instructions in the OpenSSL FIPS Users Guide
> (using MinGW and MSYS) results in OpenSSL libraries that may crash if
> used in a multithreaded program.

Are you then using VC++ to generate the final DLL which you use
with your multithreaded application?

If so, do you receive crashes regardless of if you're in FIPS mode
at the time or not?

With OpenSSL 0.9.7m and FIPS 1.1.1, I had experienced crashes even
when _not_ in fips mode but when using the FIPS OpenSSL DLL, in a
multithreaded program.  I didn't have time to research it further,
and backed off to 0.9.7l without FIPS, where the problem doesn't occur.

I haven't really researched how much code is stored in the fipscanister
and whether or not that code is used even when not in fips mode, but
it definitely sounds like you may have stumbled across something here...

-Brad

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to