[FIPS] FIPS_selftest failing in Centos 7

Akshar Kanak <akshar.kanak1@xxxxxxxxx> · Fri, 6 Mar 2020 15:24:58 +0530



Dear team
    The API FIPS_selftest() is failing .
The content of the file /proc/sys/crypto/fips_enabled is 1
    I have executed the below mentioned code

    The code is
#include "stdio.h"
int main()
{
int ret=0;
ret=FIPS_mode();
printf("\nFIPS_mode = %u  \n",ret);
ret=FIPS_selftest();
printf("\nFIPS_selftest=%u  \n",ret);
ERR_print_errors_fp(stderr);
}


     Output  is
"
FIPS_mode = 1

FIPS_selftest=0
140091346814640:error:0607B0A3:lib(6):func(123):reason(163):evp_enc.c:313:
140091346814640:error:2D06F065:lib(45):func(111):reason(101):fips_des_selftest.c:134:
"

     Looks like flag EVP_CIPH_FLAG_FIPS is not set for the cipher returned
by EVP_des_ede_ecb() .

     I am using openssl-1.0.2k-19.el7.x86_64 on "CentOS Linux release
7.6.1810 (Core)"

Please let me know you thoughts on this

Thanks and Regards
Akshar
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
https://lists.centos.org/mailman/listinfo/centos