OpenSSL3 unloading and re-loading the FIPS provider after it enters error state

2021-12-06 Thread Cristian Andrei Sandu
Hi guys, Is there any way I can re-load the FIPS provider after it reached its error state? I'd like to do it without restarting the process. (If it matters, I'm already using a non-default library context with a separate configuration file that I load with OSSL_LIB_CTX_load_config()). I'd lik

FIPS POST induced failure in OpenSSL3.0.0 for FIPS 140-2 compliance

2021-10-29 Thread Cristian Andrei Sandu
Hi all, I'm currently updating an application from OpenSSL 1.0.2d to OpenSSL 3.0.0 in preparation for a FIPS 140-2 submission and I'm not sure how to approach the issue of induced failures for the power on self tests. In OpenSSL 1.0.2d we used to use FIPS_post_set_callback() for this purpose, b