I changed the default DRBG for FIPS to HMAC_SHA384 by following Dr.
Henson's suggestion in another post titled "FIPS Mode and Default DRBG
(OpenSSL 1.0.x and FIPS 2.0 Module)"

 

I changed the OpenSSL compile flag "OPENSSL_DRBG_DEFAULT_TYPE" to point
to "NID_hmacWithSHA384".

 

In run time however, the FIPS_mode_set(1) function returned
"error:2D073087:FIPS routines:FIPS_drbg_init:selftest failure".

 

What did I do wrong? How to solve/work-around this problem?

 

My OpenSSL version is 1.0.1c, and OpenSSL/FIPS version is 2.0.2.

 

Thanks a lot.

 

Robert Bao

Software House

Tyco International

 

Reply via email to