On 12/21/2015 07:31 AM, Marcos Bontempo wrote:
> Hello,
>
> I resolved the error after compiling FIPS with ./config fips shared. I
> also needed to export LD_LIBRARY_PATH=/usr/local/ssl/lib:$LD_LIBRARY_PATH.
>
> Now I have a new problem.
>
> I executed this code to set the FIPS mode and no error is prompted:
>
> result = FIPS_mode_set(1);
> if(result != 1)
> {
> ERR_load_crypto_strings();
> printf("*** Failed to enable FIPS module. ***\n");
> printf("%s\n", ERR_error_string(ERR_get_error(), NULL));
> }
>
> But when I check the FIPS mode I still get mode 0.
>
> mode = FIPS_mode();
> if(mode == 0)
> {
> printf("*** FIPS module is disabled. ***\n");
> }
> if(mode == 1)
> {
> printf("*** FIPS module is enabled. ***\n");
> }
>
> When I execute the code as sudo, I get this error:
>
> error:0F06D065:common libcrypto routines:FIPS_mode_set:fips mode not
> supported
Your specific platform isn't supported. The OpenSSL FIPS module doesn't
run on as many platforms as OpenSSL proper.
-Steve M.
--
Steve Marquess
OpenSSL Software Foundation
1829 Mount Ephraim Road
Adamstown, MD 21710
USA
+1 877 673 6775 s/b
+1 301 874 2571 direct
marquess at openssl.com
gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc
