fipsld or libcrypto.so

2009-05-08 Thread canroc
I am confused with what is required in builiding an application to use encryption functions from a FIPS 140-2 capable openSSL library. If I link the shared library libcrypto.so (0.9.8j) into my application and do a FIPS_mode_set(1) call, is that all that is necessary for set up in order to have m

Re:Setting Log level

2009-05-08 Thread tomtang_cn
I think there's not any log level within open ssl library, it puts error info into error queue rectrieved by user applications.

[openssl.org #1922] [PATCH] DTLS Timer Bug

2009-05-08 Thread Robin Seggelmann via RT
This patch fixes a bug when checking if the additional timer for handshake messages is expired. The timeval structs were not compared in the right way. According to the RFC 4347, timers should be initialized with 1 second and doubled after each timeout up to 60 seconds. This behavior is als

Re: fipsld or libcrypto.so

2009-05-08 Thread Steve Marquess
canroc wrote: > I am confused with what is required in builiding an application to use > encryption functions from a FIPS 140-2 capable openSSL library. > > If I link the shared library libcrypto.so (0.9.8j) into my application and > do a FIPS_mode_set(1) call, is that all that is necessary for set

Re: fipsld or libcrypto.so

2009-05-08 Thread Steve Marquess
Steve Marquess wrote: > canroc wrote: > >> I am confused with what is required in builiding an application to use >> encryption functions from a FIPS 140-2 capable openSSL library. >> >> If I link the shared library libcrypto.so (0.9.8j) into my application and >> do a FIPS_mode_set(1) call, is

Re: fipsld or libcrypto.so

2009-05-08 Thread joshi chandran
We have some application which performs dynamic opening of libcrypto.a (ie at run time , this application uses the libcrypto.a) . How this application will get into the fips mode . should the application has to link with libcrypto,a statically at compile time or there is another way to handle thi