Thanks for the answer! The function ERR_get_error() is returning 0x00000000. Do you know what it means?I used the command you suggested:arm:~/nitere/new$ openssl errstr 0x00000000error:00000000:lib(0):func(0):reason(0) > Date: Sun, 3 Jan 2016 10:27:15 -0500 > From: noloader at gmail.com > To: openssl-users at openssl.org > Subject: Re: [openssl-users] FIPS_mode_set(1) error:00000000:lib(0):func(0):reason(0) > > > It compiles without errors. When I try to enable FIPS mode, I get this > > output: > > > > arm:~/nitere/new$ ./fipsctl set 1 > > *** Enabling FIPS module. *** > > *** Failed to enable FIPS module. *** > > error:00000000:lib(0):func(0):reason(0) > > > > But FIPS is still disabled: > > > > arm:~/nitere/new$ ./fipsctl get > > *** FIPS module is disabled. *** > > > > Does somebody knows what is wrong? > > Just a guess, but it looks like ERR_get_error() is returning the > result of loading the error strings. > > If FIPS_mode_set fails, then grab ERR_get_error() immediately and > ouput it in hex. With the hex error code, you can: > > $ openssl errstr 0x060800A3 > error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips > > Jeff > _______________________________________________ > openssl-users mailing list > To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160103/bf9f45d6/attachment-0001.html>
