Re: [openssl-users] How do I verify the FIPS mode

2016-02-10 Thread Lesley Kimmel
I think you can run 'OPENSSL_FIPS=1 openssl ciphers -v'. I believe that if, FIPS is compiled in properly you should get output. Otherwise an error should occur. On Wed, Feb 10, 2016 at 1:41 PM, cloud force wrote: > Hi everyone, > > I built and installed the FIPS

[openssl-users] How do I verify the FIPS mode

2016-02-10 Thread cloud force
Hi everyone, I built and installed the FIPS capable OpenSSL lib on my system, and I was wondering what's the easiest way to find out whether my OpenSSL is really FIPS capable or not. e.g. is there any way to run some openssl commands to find out, such as "openssl ciphers -v", and what cipher

Re: [openssl-users] How do I verify the FIPS mode

2016-02-10 Thread Steve Marquess
On 02/10/2016 02:56 PM, Lesley Kimmel wrote: > Actuall, I may have steered you wrong. It appears that OPENSSL_FIPS may > have no affect against a non-FIPS enabled OpenSSL. According to some > posts you can do 'OPENSSL_FIPS=1 openssl md5' which should return an > error as md5 is not an enabled

Re: [openssl-users] How do I verify the FIPS mode

2016-02-10 Thread cloud force
Thanks Lesley and Steve for the answers. Rich On Wed, Feb 10, 2016 at 12:02 PM, Steve Marquess wrote: > On 02/10/2016 02:56 PM, Lesley Kimmel wrote: > > Actuall, I may have steered you wrong. It appears that OPENSSL_FIPS may > > have no affect against a non-FIPS enabled

Re: [openssl-users] How do I verify the FIPS mode

2016-02-10 Thread Lesley Kimmel
Actuall, I may have steered you wrong. It appears that OPENSSL_FIPS may have no affect against a non-FIPS enabled OpenSSL. According to some posts you can do 'OPENSSL_FIPS=1 openssl md5' which should return an error as md5 is not an enabled cipher in FIPS mode. On Wed, Feb 10, 2016 at 1:49 PM,