openssl FIPS on linux

2010-08-19 Thread kevin747
Hi all, I want to use FIPS mode under linux. With openssl-0.9.8o, I typed ./config fipscanisterbuild and then typed make. The compile successful. Then I did a test about fips, below is my test code (main.cpp): #include iostream #include openssl/ssl.h #include openssl/fips.h int main(int argc,

Re: FIPS mode OpenSSL 0.9.8o RSA_sign() and OpenSSH

2010-08-19 Thread Dr. Stephen Henson
On Wed, Aug 18, 2010, Kriloff wrote: Is there a reason why RSA_sign() blocks anything that isn't a TLS signature in FIPS mode? OpenSSH ssh_rsa_sign() function calls RSA_sign() with nid=NID_sha1 for key signing, but given the code in OpenSSL RSA_sign() it fails with operation not allowed in

Re: [openssl.org #1822] Issues w/ fips Makefile

2010-08-19 Thread Philip Prindeville
On 7/19/10 9:25 AM, Philip Prindeville via RT wrote: On 7/18/10 12:27 PM, Stephen Henson via RT wrote: [philipp_s...@redfish-solutions.com - Sun Jul 18 19:02:04 2010]: The problem here is that the intermediate binaries like ./fips_standalone_sha1 are being built with the target compiler,

Re: [openssl.org #1822] Issues w/ fips Makefile

2010-08-19 Thread Philip Prindeville via RT
On 7/19/10 9:25 AM, Philip Prindeville via RT wrote: On 7/18/10 12:27 PM, Stephen Henson via RT wrote: [philipp_s...@redfish-solutions.com - Sun Jul 18 19:02:04 2010]: The problem here is that the intermediate binaries like ./fips_standalone_sha1 are being built with the target compiler,