Re: [openssl-users] FIPS: using libcrypto.so ?

2016-08-03 Thread Thomas Francis, Jr.
> On Aug 2, 2016, at 1:59 PM, jonetsu wrote: > > The current FIPS User Guide mentions: > > "3.3 Creation of Shared Libraries > > The FIPS Object Module is not directly usable as a shared > library, but it can be linked into an application that is a > shared library.

Re: [openssl-users] FIPS: using libcrypto.so ?

2016-08-03 Thread jonetsu
Thanks for the explanation. > Just link against the library produced by the FIPS capable > OpenSSL build. If, for some reason, that only produced > libcrypto.a, then you need to investigate why — perhaps you > passed “no-shared” when running the config script? The confusion came from trying to

[openssl-users] 755413103 error on fingerprint match

2016-08-03 Thread Brian Jost
I modified a script to get a FIPS compliant iOS library and am having issues with the fingerprint. I had to add a CPU adjustment to the incore_macho but I wouldn't think that would cause a FIPS fingerprint mismatch. https://gist.github.com/jostster/ebbc6925c668b632d8b185293080256c Does anyone

Re: [openssl-users] 755413103 error on fingerprint match

2016-08-03 Thread Brian Jost
Update on this. Here is the log from my app. Any idea why my calculated sig is 0...? 2016-08-03 11:47:49.988 App[32127:2253410] FIPS_mode_set failed: 755413103 2016-08-03 11:47:49.988 App[32127:2253410] Embedded sig: 7363808352b3d84a797c91df813afcb58bf924b4 2016-08-03 11:47:49.988