> Does this mean that if I want to use low level digest APIs that I would
> comment out the ' if (FIPS_mode())' test below?
> If this is ocorrect, am I now violating FIPS?
Yes, if you make that change and try to use that API, you would be violating
the FIPS validation.
The error message seems pretty clear:
sha_locl.h(128): OpenSSL internal error, assertion failed: Low level
API call to digest SHA1 forbidden in FIPS mode!
Are you asking which API to use instead?
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [email protected]