Does anyone know why this warning is produced when attempting to call SSL_export_keying_material()?

I have the FIPS module linked in and I notice that the Makefile in the openssl-fips-2.0 dir contains the line:

OPTIONS= no-asm no-bf no-camellia no-cast no-ec_nistp_64_gcc_128 no-gmp no-idea no-jpake no-krb5 no-md2 no-md5 no-mdc2 no-rc2 no-rc4 no-rc5 no-rfc3779 no-ripemd no-seed no-srp no-ssl2 no-ssl3 no-store no-tls1 *no-tlsext* no-zlib no-zlib-dynamic no-static-engine

Really? Does this mean I can't use any tls ext functions - specifically SSL_export_keying_material() - in fips mode?

Trevor

Reply via email to