Is it sufficient to change -O3 to -O2 it in the Configure file or is there somewhere else it needs to be changed? Nou Dadoun Senior Firmware Developer, Security Specialist Office: 604.629.5182 ext 2632 -----Original Message----- From: openssl-users [mailto:openssl-users-bounces@xxxxxxxxxxx] On Behalf Of Kurt Roeckx Sent: Monday, February 29, 2016 3:47 PM To: openssl-users at openssl.org Subject: Re: [openssl-dev] Failed TLSv1.2 handshake with error 67702888--bad signature On Mon, Feb 29, 2016 at 10:48:22PM +0000, Nounou Dadoun wrote: > But this demonstrates that my headaches have been coming from the fact that sha384 and sha512 are broken in our build somehow. The no-asm configure directive didn't make a difference so maybe a compiler bug or something? I'm assuming you build using -O3. Can you try different levels? I don't know of any problems on Debian using -O2.