Re: Problem performing SSL handshake in FIPS mode

2011-05-26 Thread Henrik Grindal Bakken
Dr. Stephen Henson st...@openssl.org writes: This should work now as the FIPS capable code has been added to the ssl library. Thanks, I noticed. I'm now running TLS handshakes (and other crypto stuff, like Diffie-Hellmann and AES) on openssl-HEAD with FIPS_mode(1). Looks excellent! --

Re: Problem performing SSL handshake in FIPS mode

2011-05-24 Thread Dr. Stephen Henson
On Wed, May 18, 2011, Henrik Grindal Bakken wrote: Dr. Stephen Henson st...@openssl.org writes: On Mon, May 16, 2011, Henrik Grindal Bakken wrote: This sounded a bit weird to me, since I've tried my best to set up my application to use only FIPS-validated algorithms, but to no avail.

Re: Problem performing SSL handshake in FIPS mode

2011-05-18 Thread Henrik Grindal Bakken
Dr. Stephen Henson st...@openssl.org writes: On Mon, May 16, 2011, Henrik Grindal Bakken wrote: Hi. I'm trying to test the current CVS HEAD with FIPS_set_module_mode(1). It's looking fairly promising to me, but I currently have one problem: While performing an SSL handshake, I get

Problem performing SSL handshake in FIPS mode

2011-05-16 Thread Henrik Grindal Bakken
Hi. I'm trying to test the current CVS HEAD with FIPS_set_module_mode(1). It's looking fairly promising to me, but I currently have one problem: While performing an SSL handshake, I get 1208113320:error:060A80A3:digital envelope routines:FIPS_DIGESTINIT:disabled for fips:fips_md.c:179: This

Re: Problem performing SSL handshake in FIPS mode

2011-05-16 Thread Dr. Stephen Henson
On Mon, May 16, 2011, Henrik Grindal Bakken wrote: Hi. I'm trying to test the current CVS HEAD with FIPS_set_module_mode(1). It's looking fairly promising to me, but I currently have one problem: While performing an SSL handshake, I get 1208113320:error:060A80A3:digital envelope