Robert Sicoie wrote: > Hi, > > I'm building cURL with FIPS capable OpenSSL module. I'm calling > FIPS_mode_set function to enable FIPS somewhere after SSL_library_init() > has already been called. The binary file is working fine, but is there a > problem that the FIPS mode is turned on after SSL_library_init() but > before connecting to the remote host? > > FIPS_mode_set function must be called before SSL_library_init()? > No, FIPS_mode_set() can be called afterwards. In can even be called long afterwards, after performing crypto operations in regular (non-FIPS) mode.
-Steve M. -- Steve Marquess Open Source Software institute [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
