On Thu, Jul 16, 2015, Jayalakshmi bhat wrote: > Hi All, > > I am using OpenSSL library for a SSL client performing mutual > authentication. RSA certificate used is signed with SHA512 digest. When I > switch to FIPS mode and perform re-authentication, I am hitting an > error :0409A09E:lib(4):func(154):reason(158). Cipher used is AES128-SHA. > > Can any one tell me what could be the possible issue? > A bit more information would be helpful. When you say "SSL client" do you mean using SSL v3.0 or TLS? SSL 3.0 isn't allowed in FIPS mode but I'd expect a different error. Which version of OpenSSL are you using? Can you reproduce the error using s_client? Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org